summaryrefslogtreecommitdiffstats
path: root/net/netfilter/ipvs/ip_vs_conn.c
diff options
context:
space:
mode:
authorSven Wegener2008-09-19 20:41:56 +0200
committerSimon Horman2008-09-22 01:55:58 +0200
commite6f225ebb7c35fe30fdf8608927c5cf8fce6de7d (patch)
treecd6c67a447fcf35c020fb52d3ac4d60402ed80f1 /net/netfilter/ipvs/ip_vs_conn.c
parenttcp: advertise MSS requested by user (diff)
downloadkernel-qcow2-linux-e6f225ebb7c35fe30fdf8608927c5cf8fce6de7d.tar.gz
kernel-qcow2-linux-e6f225ebb7c35fe30fdf8608927c5cf8fce6de7d.tar.xz
kernel-qcow2-linux-e6f225ebb7c35fe30fdf8608927c5cf8fce6de7d.zip
ipvs: Restrict sync message to 255 connections
The nr_conns variable in the sync message header is only eight bits wide and will overflow on interfaces with a large MTU. As a result the backup won't parse all connections contained in the sync buffer. On regular ethernet with an MTU of 1500 this isn't a problem, because we can't overflow the value, but consider jumbo frames being used on a cross-over connection between both directors. We now restrict the size of the sync buffer, so that we never put more than 255 connections into a single sync buffer. Signed-off-by: Sven Wegener <sven.wegener@stealer.net> Signed-off-by: Simon Horman <horms@verge.net.au>
Diffstat (limited to 'net/netfilter/ipvs/ip_vs_conn.c')
0 files changed, 0 insertions, 0 deletions