diff options
| author |   Florian Westphal <fw@strlen.de> | 2022-08-26 15:32:27 +0200 |
|---|---|---|
| committer | Florian Westphal <fw@strlen.de> | 2022-09-07 16:46:03 +0200 |
| commit | 628d694344a02a428846643791e8b26071b76328 (patch) | |
| tree | d528301b8fb59ad2946c266c3bd333701ad4ee0a /include/net/act_api.h | |
| parent | netfilter: conntrack: remove unneeded indent level (diff) | |
| download | wireguard-linux-628d694344a02a428846643791e8b26071b76328.tar.xz wireguard-linux-628d694344a02a428846643791e8b26071b76328.zip | |
netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst
In case the endpoints and conntrack go out-of-sync, i.e. there is
disagreement wrt. validy of sequence/ack numbers between conntracks
internal state and those of the endpoints, connections can hang for a
long time (until ESTABLISHED timeout).
This adds a check to detect a fin/fin exchange even if those are
invalid. The timeout is then lowered to UNACKED (default 300s).
Signed-off-by: Florian Westphal <fw@strlen.de>
Diffstat (limited to 'include/net/act_api.h')
0 files changed, 0 insertions, 0 deletions