Files
linux-stable-mirror/include/uapi/linux
Christoph Paasch 71c02379c7 tcp: Configure TFO without cookie per socket and/or per route
We already allow to enable TFO without a cookie by using the
fastopen-sysctl and setting it to TFO_SERVER_COOKIE_NOT_REQD (or
TFO_CLIENT_NO_COOKIE).
This is safe to do in certain environments where we know that there
isn't a malicous host (aka., data-centers) or when the
application-protocol already provides an authentication mechanism in the
first flight of data.

A server however might be providing multiple services or talking to both
sides (public Internet and data-center). So, this server would want to
enable cookie-less TFO for certain services and/or for connections that
go to the data-center.

This patch exposes a socket-option and a per-route attribute to enable such
fine-grained configurations.

Signed-off-by: Christoph Paasch <cpaasch@apple.com>
Reviewed-by: Yuchung Cheng <ycheng@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2017-10-24 18:48:08 +09:00
..
2017-08-31 17:32:38 -04:00
2017-08-15 09:02:09 -07:00
2017-08-20 08:14:03 -04:00
2017-08-31 14:42:19 -07:00
2014-11-19 14:48:02 -06:00
2012-10-16 18:49:15 -07:00
2017-08-03 21:37:29 -07:00
2015-04-12 21:25:13 -04:00
2017-08-31 17:32:38 -04:00
2017-03-25 20:11:19 -07:00
2017-02-03 15:16:45 -05:00
2016-11-03 15:41:11 -04:00
2016-06-27 16:31:25 +01:00
2017-07-06 16:24:30 -07:00
2017-08-08 06:03:15 -04:00
2017-01-17 14:38:43 -05:00
2015-01-20 13:51:06 +01:00
2014-12-13 12:42:52 -08:00
2017-05-30 08:20:25 -06:00
2017-02-20 11:13:37 -05:00
2017-10-10 16:38:34 -07:00
2017-09-07 13:24:16 -05:00
2015-09-04 16:54:41 -07:00
2017-01-09 16:07:38 -05:00
2017-08-04 10:30:27 +02:00
2014-12-09 14:10:41 +08:00
2017-01-10 18:31:55 -08:00
2017-06-15 12:12:40 -04:00
2015-12-18 17:48:51 -08:00
2015-10-27 18:55:31 -07:00
2015-03-29 12:13:52 +10:30
2016-04-30 09:26:55 -07:00