Files
kernel_arpi/include/uapi/linux
Christoph Paasch 71c02379c7 tcp: Configure TFO without cookie per socket and/or per route
We already allow to enable TFO without a cookie by using the
fastopen-sysctl and setting it to TFO_SERVER_COOKIE_NOT_REQD (or
TFO_CLIENT_NO_COOKIE).
This is safe to do in certain environments where we know that there
isn't a malicous host (aka., data-centers) or when the
application-protocol already provides an authentication mechanism in the
first flight of data.

A server however might be providing multiple services or talking to both
sides (public Internet and data-center). So, this server would want to
enable cookie-less TFO for certain services and/or for connections that
go to the data-center.

This patch exposes a socket-option and a per-route attribute to enable such
fine-grained configurations.

Signed-off-by: Christoph Paasch <cpaasch@apple.com>
Reviewed-by: Yuchung Cheng <ycheng@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2017-10-24 18:48:08 +09:00
..
2017-08-31 17:32:38 -04:00
2017-08-15 09:02:09 -07:00
2017-08-20 08:14:03 -04:00
2017-08-31 14:42:19 -07:00
2017-08-03 21:37:29 -07:00
2017-08-31 17:32:38 -04:00
2017-03-25 20:11:19 -07:00
2017-07-06 16:24:30 -07:00
2017-08-08 06:03:15 -04:00
2017-05-30 08:20:25 -06:00
2017-10-10 16:38:34 -07:00
2017-09-07 13:24:16 -05:00
2017-08-04 10:30:27 +02:00
2017-06-15 12:12:40 -04:00
2017-06-05 16:58:59 +02:00
2017-03-31 12:55:06 +02:00
2017-04-24 12:35:56 -04:00