Eric Dumazet 06eb395fa9 pkt_sched: fq: better control of DDOS traffic ... FQ has a fast path for skb attached to a socket, as it does not have to compute a flow hash. But for other packets, FQ being non stochastic means that hosts exposed to random Internet traffic can allocate million of flows structure (104 bytes each) pretty easily. Not only host can OOM, but lookup in RB trees can take too much cpu and memory resources. This patch adds a new attribute, orphan_mask, that is adding possibility of having a stochastic hash for orphaned skb. Its default value is 1024 slots, to mimic SFQ behavior. Note: This does not apply to locally generated TCP traffic, and no locally generated traffic will share a flow structure with another perfect or stochastic flow. This patch also handles the specific case of SYNACK messages: They are attached to the listener socket, and therefore all map to a single hash bucket. If listener have set SO_MAX_PACING_RATE, hoping to have new accepted socket inherit this rate, SYNACK might be paced and even dropped. This is very similar to an internal patch Google have used more than one year. Signed-off-by: Eric Dumazet <edumazet@google.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2015-02-04 22:15:45 -08:00
..
6lowpan	net/6lowpan: Remove FSF address from GPL statement.	2014-12-05 12:43:04 +01:00
9p	9p/trans_virtio: enable VQs early	2014-10-15 10:25:04 +10:30
802	net: set name_assign_type in alloc_netdev()	2014-07-15 16:12:48 -07:00
8021q	vlan: advertise link netns via netlink	2015-01-23 17:51:15 -08:00
appletalk	new helper: memcpy_from_msg()	2014-11-24 04:28:48 -05:00
atm	put iov_iter into msghdr	2014-12-09 16:29:03 -05:00
ax25	new helper: memcpy_from_msg()	2014-11-24 04:28:48 -05:00
batman-adv	batman-adv: Kconfig, Add missing DEBUG_FS dependency	2015-01-07 22:17:11 +01:00
bluetooth	Bluetooth: Fix potential NULL dereference	2015-02-03 09:02:12 +01:00
bridge	bridge: Let bridge not age 'externally' learnt FDB entries, they are removed when 'external' entity notifies the aging	2015-02-04 13:51:10 -08:00
caif	put iov_iter into msghdr	2014-12-09 16:29:03 -05:00
can	netlink: make nlmsg_end() and genlmsg_end() void	2015-01-18 01:03:45 -05:00
ceph	libceph: fix sparse endianness warnings	2015-01-08 20:36:57 +03:00
core	Merge branch 'for-davem' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2015-02-04 20:46:55 -08:00
dcb	dcbnl : Disable software interrupts before taking dcb_lock	2014-11-16 14:50:52 -05:00
dccp	net: introduce helper macro for_each_cmsghdr	2014-12-10 22:41:55 -05:00
decnet	netlink: Fix bugs in nlmsg_end() conversions.	2015-01-18 23:36:08 -05:00
dns_resolver	Merge commit 'v3.16' into next	2014-10-01 00:44:04 +10:00
dsa	net: dsa: set slave MII bus PHY mask	2015-01-25 16:00:54 -08:00
ethernet	net: Add Transparent Ethernet Bridging GRO support.	2015-01-02 15:46:41 -05:00
hsr	…
ieee802154	netlink: make nlmsg_end() and genlmsg_end() void	2015-01-18 01:03:45 -05:00
ipv4	Merge branch 'for-davem' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2015-02-04 20:46:55 -08:00
ipv6	Merge branch 'for-davem' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2015-02-04 20:46:55 -08:00
ipx	switch ipxrtr_route_packet() from iovec to msghdr	2014-11-24 04:28:49 -05:00
irda	irda: use msecs_to_jiffies for conversions	2015-01-30 18:08:25 -08:00
iucv	net: introduce helper macro for_each_cmsghdr	2014-12-10 22:41:55 -05:00
key	new helper: memcpy_from_msg()	2014-11-24 04:28:48 -05:00
l2tp	netlink: make nlmsg_end() and genlmsg_end() void	2015-01-18 01:03:45 -05:00
lapb	lapb: move EXPORT_SYMBOL after functions.	2014-10-24 15:51:42 -04:00
llc	net: llc: use correct size for sysctl timeout entries	2015-01-25 00:23:21 -08:00
mac80211	Last round of updates for net-next:	2015-02-04 14:57:45 -08:00
mac802154	mac802154: fix kbuild test robot warning	2015-01-03 01:51:51 +01:00
mpls	net: mark some potential candidates __read_mostly	2015-01-30 17:58:39 -08:00
netfilter	netfilter: Use rhashtable walk iterator	2015-02-04 20:34:53 -08:00
netlabel	netlabel: Less function calls in netlbl_mgmt_add_common() after error detection	2015-02-03 16:22:13 -08:00
netlink	Merge branch 'for-davem' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2015-02-04 20:46:55 -08:00
netrom	new helper: memcpy_from_msg()	2014-11-24 04:28:48 -05:00
nfc	NFC: hci: Remove nfc_hci_pipe2gate function	2015-01-28 00:03:36 +01:00
openvswitch	openvswitch: Add support for checksums on UDP tunnels.	2015-01-28 23:04:15 -08:00
packet	netlink: make nlmsg_end() and genlmsg_end() void	2015-01-18 01:03:45 -05:00
phonet	phonet netlink: allow multiple messages per skb in route dump	2015-01-19 16:20:17 -05:00
rds	rds: Fix min() warning in rds_message_inc_copy_to_user()	2014-12-15 11:49:09 -05:00
rfkill	Last round of updates for net-next:	2015-02-04 14:57:45 -08:00
rose	new helper: memcpy_from_msg()	2014-11-24 04:28:48 -05:00
rxrpc	Merge branch 'for-davem' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2015-02-04 20:46:55 -08:00
sched	pkt_sched: fq: better control of DDOS traffic	2015-02-04 22:15:45 -08:00
sctp	net: sctp: Deletion of an unnecessary check before the function call "kfree"	2015-02-02 19:29:43 -08:00
sunrpc	rpc: fix xdr_truncate_encode to handle buffer ending on page boundary	2015-01-07 14:03:58 -05:00
switchdev	swdevice: add new apis to set and del bridge port attributes	2015-02-01 23:16:34 -08:00
tipc	Merge branch 'for-davem' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2015-02-04 20:46:55 -08:00
unix	net: remove sock_iocb	2015-01-28 23:15:07 -08:00
vmw_vsock	vmci: propagate msghdr all way down to __qp_memcpy_to_queue()	2015-02-04 01:34:14 -05:00
wimax	wimax: convert printk to pr_foo()	2014-10-07 20:28:44 -04:00
wireless	Last round of updates for net-next:	2015-02-04 14:57:45 -08:00
x25	new helper: memcpy_from_msg()	2014-11-24 04:28:48 -05:00
xfrm	netlink: make nlmsg_end() and genlmsg_end() void	2015-01-18 01:03:45 -05:00
Kconfig	net: introduce generic switch devices support	2014-12-02 20:01:20 -08:00
Makefile	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2014-12-16 15:53:03 -08:00
compat.c	put iov_iter into msghdr	2014-12-09 16:29:03 -05:00
socket.c	net: switch sockets to ->read_iter/->write_iter	2015-02-04 01:34:15 -05:00
sysctl_net.c	…