genode/repos/os/src
Sid Hussmann 4e822436fc nic_router: use increasing src port for new nat
The NAT feature of the NIC router used to prefer re-using source ports that
have been freed recently. From an external server's perspective, if a client
dies and restarts, chances are high that the new connect arrives with the same
source-IP/source-port as the old connection. The server has to forcefully reset
the connection. If that happens a lot, the server may even start to ignore
further connections from this IP/port combination for a while as a mitigation.

This patch adds a continuous counter feature that makes sure that every new
port allocation will increment and result in a port that hasn't been used for a
long time.

The NAT feature of the nic_router is now more in line with RFC 6056 chapter 4.

Ref #4086
2021-05-05 11:35:29 +02:00
..
app base: fix child destruction while close requested 2021-03-12 12:01:38 +01:00
drivers platform_drv/x86: support to disable MSI-X 2021-05-05 11:35:28 +02:00
init sandbox/init: parse config using 'List_model' 2021-04-20 12:03:04 +02:00
lib vfs/tar: remove "tar archive ..." message 2021-04-20 12:10:57 +02:00
server nic_router: use increasing src port for new nat 2021-05-05 11:35:29 +02:00
test event_filter: add new test cases 2021-05-05 11:35:29 +02:00