| commit | 275411430f892407b885be1de2548b2e632892c3 | [log] [tgz] |
|---|---|---|
| author | Julian Anastasov <ja@ssi.bg> | Fri Jul 06 08:25:53 2018 +0300 |
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | Wed Jul 18 11:26:40 2018 +0200 |
| tree | f0e79459f0efcb3be42eaebfe03581b093f91d21 | |
| parent | ec1b28ca9674def4a158808a6493bdb87b993d81 [diff] |
ipvs: add assured state for conn templates cp->state was not used for templates. Add support for state bits and for the first "assured" bit which indicates that some connection controlled by this template was established or assured by the real server. In a followup patch we will use it to drop templates under SYN attack. Signed-off-by: Julian Anastasov <ja@ssi.bg> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>