Re: [PATCH nf 2/3] netfilter: ipvs: allow rescheduling after RST

2016-03-05 Thread Julian Anastasov
Hello, On Thu, 18 Feb 2016, Sergei Shtylyov wrote: > On 2/18/2016 3:41 AM, Simon Horman wrote: > > > From: Julian Anastasov > > > > "RFC 5961, 4.2. Mitigation" describes a mechanism to request > > client to confirm with RST the restart of TCP connection > > before

Re: [PATCH nf 2/3] netfilter: ipvs: allow rescheduling after RST

2016-02-18 Thread Sergei Shtylyov
Hello. On 2/18/2016 3:41 AM, Simon Horman wrote: From: Julian Anastasov "RFC 5961, 4.2. Mitigation" describes a mechanism to request client to confirm with RST the restart of TCP connection before resending its SYN. As result, IPVS can see SYNs for existing connection in CLOSE

[PATCH nf 2/3] netfilter: ipvs: allow rescheduling after RST

2016-02-17 Thread Simon Horman
From: Julian Anastasov "RFC 5961, 4.2. Mitigation" describes a mechanism to request client to confirm with RST the restart of TCP connection before resending its SYN. As result, IPVS can see SYNs for existing connection in CLOSE state. Add check to allow rescheduling in this state.