diff options
| author |   Alexander Chernavin <achernavin@netgate.com> | 2022-07-20 12:43:42 +0000 |
|---|---|---|
| committer |   Fan Zhang <roy.fan.zhang@intel.com> | 2022-08-08 14:24:06 +0000 |
| commit | ce91af8ad27e5ddef1e1f8316129bfcaa3de9ef6 (patch) | |
| tree | 42fa54977a8b413e43d7b03f27ce8a256ad8f109 /src/vnet/crypto/crypto_api.c | |
| parent | 03aae9637922023dd77955cb15caafb7ce309200 (diff) | |
wireguard: add dos mitigation support
Type: feature
With this change:
- if the number of received handshake messages exceeds the limit
calculated based on the peers number, under load state will activate;
- if being under load a handshake message with a valid mac1 is
received, but mac2 is invalid, a cookie reply will be sent.
Also, cover these with tests.
Signed-off-by: Alexander Chernavin <achernavin@netgate.com>
Change-Id: I3003570a9cf807cfb0b5145b89a085455c30e717
Diffstat (limited to 'src/vnet/crypto/crypto_api.c')
0 files changed, 0 insertions, 0 deletions