From: Wei Wang <wei...@google.com> Currently there are still some firewall issues in the middlebox which make the middlebox drop packets silently for TFO sockets. This kind of issue is hard to be detected by the end client.
This patch series tries to detect such issues in the kernel and disable TFO temporarily. More details about the issues and the fixes are included in the following patches. Wei Wang (3): net-tcp_fastopen: Disable active side TFO in certain scenarios net-tcp_fastopen: Add snmp counter for blackhole detection net-tcp_fastopen: Remove mss check in tcp_write_timeout() Documentation/networking/ip-sysctl.txt | 8 +++ include/linux/tcp.h | 1 + include/net/tcp.h | 6 ++ include/uapi/linux/snmp.h | 1 + net/ipv4/proc.c | 1 + net/ipv4/sysctl_net_ipv4.c | 21 +++++++ net/ipv4/tcp.c | 1 + net/ipv4/tcp_fastopen.c | 102 +++++++++++++++++++++++++++++++++ net/ipv4/tcp_input.c | 23 ++++++-- net/ipv4/tcp_ipv4.c | 3 + net/ipv4/tcp_timer.c | 7 +-- 11 files changed, 166 insertions(+), 8 deletions(-) -- 2.12.2.816.g2cccc81164-goog