Eric Dumazet 79e3602caa tcp: make global challenge ack rate limitation per net-ns and default disabled ... Because per host rate limiting has been proven problematic (side channel attacks can be based on it), per host rate limiting of challenge acks ideally should be per netns and turned off by default. This is a long due followup of following commits: 083ae30828 ("tcp: enable per-socket rate limiting of all 'challenge acks'") f2b2c582e8 ("tcp: mitigate ACK loops for connections as tcp_sock") 75ff39ccc1 ("tcp: make challenge acks less predictable") Signed-off-by: Eric Dumazet <edumazet@google.com> Cc: Jason Baron <jbaron@akamai.com> Acked-by: Neal Cardwell <ncardwell@google.com> Signed-off-by: Jakub Kicinski <kuba@kernel.org>		2022-08-31 19:56:48 -07:00
..
caif	tty: cumulate and document tty_struct::flow* members	2021-05-13 16:57:16 +02:00
device_drivers	ice: add write functionality for GNSS TTY	2022-07-21 13:25:17 -07:00
devlink	Documentation: networking: correct possessive "its"	2022-08-31 12:36:08 -07:00
dsa	docs: net: dsa: mention that VLANs are now refcounted on shared ports	2022-07-18 12:44:37 +01:00
mac80211_hwsim
6lowpan.rst
6pack.rst
af_xdp.rst	doc, af_xdp: Fix bind flags option typo	2021-07-12 16:55:01 +02:00
alias.rst
arcnet-hardware.rst
arcnet.rst
atm.rst
ax25.rst
bareudp.rst
batman-adv.rst	batman-adv: Move IRC channel to hackint.org	2021-08-08 20:05:46 +02:00
bonding.rst	docs: net: bonding: remove mentions of trans_start	2022-08-03 19:20:13 -07:00
bridge.rst
can.rst	can: Break loopback loop on loopback documentation	2022-06-11 22:40:13 +02:00
can_ucan_protocol.rst
cdc_mbim.rst
checksum-offloads.rst
dccp.rst
dctcp.rst
decnet.rst
dns_resolver.rst
driver.rst	Documentation: networking: correct possessive "its"	2022-08-31 12:36:08 -07:00
eql.rst
ethtool-netlink.rst	net: ethtool: extend ringparam set/get APIs for tx_push	2022-04-15 11:41:35 -07:00
failover.rst
fib_trie.rst
filter.rst	bpf, docs: Split general purpose eBPF documentation out of filter.rst	2021-11-30 10:52:11 -08:00
gen_stats.rst
generic-hdlc.rst
generic_netlink.rst
gtp.rst
ieee802154.rst
ila.rst
index.rst	docs: change the title of networking docs	2022-05-19 18:44:57 -07:00
ioam6-sysctl.rst	ipv6: ioam: Documentation for new IOAM sysctls	2021-07-21 08:14:33 -07:00
ip-sysctl.rst	tcp: make global challenge ack rate limitation per net-ns and default disabled	2022-08-31 19:56:48 -07:00
ip_dynaddr.rst
ipddp.rst
ipsec.rst
ipv6.rst
ipvlan.rst	Documentation: networking: correct possessive "its"	2022-08-31 12:36:08 -07:00
ipvs-sysctl.rst	netfilter: ipvs: Fix reuse connection if RS weight is 0	2021-11-08 11:42:47 +01:00
j1939.rst
kapi.rst
kcm.rst
l2tp.rst	Documentation: networking: correct possessive "its"	2022-08-31 12:36:08 -07:00
lapb-module.rst
mac80211-auth-assoc-deauth.txt
mac80211-injection.rst
mctp.rst	mctp: Add SIOCMCTP{ALLOC,DROP}TAG ioctls for tag control	2022-02-09 12:00:11 +00:00
mpls-sysctl.rst
mptcp-sysctl.rst	mptcp: Add a per-namespace sysctl to set the default path manager type	2022-04-29 17:25:14 -07:00
msg_zerocopy.rst	docs: use the lore redirector everywhere	2021-10-12 13:58:19 -06:00
multiqueue.rst
net_dim.rst
net_failover.rst	Documentation: networking: net_failover: Fix documentation	2021-11-17 13:59:49 +00:00
netconsole.rst
netdev-features.rst	net: hsr: add offloading support	2021-02-11 13:24:44 -08:00
netdevices.rst	net: bonding: move ioctl handling to private ndo operation	2021-07-27 20:11:45 +01:00
netfilter-sysctl.rst
netif-msg.rst
nexthop-group-resilient.rst	Documentation: net: Document resilient next-hop groups	2021-03-29 13:51:38 -07:00
nf_conntrack-sysctl.rst	netfilter: conntrack: add nf_conntrack_events autodetect mode	2022-05-13 18:56:28 +02:00
nf_flowtable.rst	docs: nf_flowtable: fix compilation and warnings	2021-03-25 17:42:02 -07:00
nfc.rst
openvswitch.rst
operstates.rst	docs: operstates: document IF_OPER_TESTING	2021-08-02 15:16:04 +01:00
packet_mmap.rst	docs: networking: Replace strncpy() with strscpy()	2021-06-04 11:21:43 -06:00
page_pool.rst	Documentation: update networking/page_pool.rst	2022-03-03 09:55:28 +00:00
phonet.rst
phy.rst	docs: networking: phy: Fix a typo	2022-06-13 23:12:44 -07:00
pktgen.rst	pktgen: document the latest pktgen usage options	2021-08-25 13:44:30 +01:00
plip.rst
ppp_generic.rst
proc_net_tcp.rst
radiotap-headers.rst
rds.rst	Doc: networking: Fix the title's Sphinx overline in rds.rst	2021-11-29 15:18:21 -07:00
regulatory.rst
rxrpc.rst
scaling.rst
sctp.rst
secid.rst
seg6-sysctl.rst	doc: move seg6_flowlabel to seg6-sysctl.rst	2021-04-14 13:13:15 -07:00
segmentation-offloads.rst
sfp-phylink.rst	doc: sfp-phylink: Fix a broken reference	2022-08-02 21:45:07 -07:00
skbuff.rst	skbuff: render the checksum comment to documentation	2022-05-10 17:48:37 -07:00
smc-sysctl.rst	net/smc: Introduce a sysctl for setting SMC-R buffer type	2022-07-18 11:19:17 +01:00
snmp_counter.rst
statistics.rst	docs: networking: extend the statistics documentation	2021-04-16 16:59:20 -07:00
strparser.rst
switchdev.rst	Documentation: networking: correct possessive "its"	2022-08-31 12:36:08 -07:00
sysfs-tagging.rst
tc-actions-env-rules.rst
tcp-thin.rst
team.rst
timestamping.rst	docs: networking: Use netif_rx().	2022-03-04 12:02:19 +00:00
tipc.rst	Documentation: add more details in tipc.rst	2021-07-01 13:18:18 -07:00
tls-offload-layers.svg
tls-offload-reorder-bad.svg
tls-offload-reorder-good.svg
tls-offload.rst	net: Disable NETIF_F_HW_TLS_RX when RXCSUM is disabled	2021-01-19 15:58:05 -08:00
tls.rst	tls: rx: add counter for NoPad violations	2022-07-11 19:48:33 -07:00
tproxy.rst
tuntap.rst	docs: networking: Replace strncpy() with strscpy()	2021-06-04 11:21:43 -06:00
udplite.rst
vrf.rst	doc: Document unexpected tcp_l3mdev_accept=1 behavior	2021-08-23 11:53:24 +01:00
vxlan.rst
x25-iface.rst	net: x25: Queue received packets in the drivers instead of per-CPU queues	2021-04-05 11:42:12 -07:00
x25.rst
xfrm_device.rst	docs: networking: Fix a typo	2021-03-20 19:02:42 -07:00
xfrm_proc.rst
xfrm_sync.rst
xfrm_sysctl.rst