From nobody Sat Aug 30 14:56:08 2025 X-Original-To: dev-commits-src-main@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4cDdVw4dGWz65ZdW; Sat, 30 Aug 2025 14:56:08 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R12" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4cDdVw3v0Qz3W0g; Sat, 30 Aug 2025 14:56:08 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1756565768; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=9nkQzTKikU02K89I1mp5kMtaizq7uQoNagGCsKehOJM=; b=cTWlAc3CXgtXjoqerf4ol4JGzDHBAYbmTdh7LR/Fet+ginixxX4vcJGRAITz2LMJc1HcTD Vf/E2OQxn8jgpI5XJytrRm14/JKvq2RS1rOXOFzfCVW++AUKl9RkryvcM1o3iDda/H4Q84 OZ2YPxMseE+5nuArRDypqwtR89m8+33AzVGsNqfDxV3GetysDTwYTQgBleBC1ryi1bJcAc VMs5ovDXnmiJopmL2nKi0ea/fsWQMf4fqvU75UZL4f0r8IlS3lX5gLFayFRFl94HDp+aYU sBWU7Chl05szm7833CCxHZQ4ytRoqjohbjK08bBgHamwQK4ymFJIy4IOeBWwDg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1756565768; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=9nkQzTKikU02K89I1mp5kMtaizq7uQoNagGCsKehOJM=; b=fLIfNmjWA7QxUbDSc9+uFxl1OUDDPbc4bnnXw0C259RVuawTYZU+v9xinrILglJLRuCVqX 4THyaOCS9Q53pnUqQs7PYsojw0HFp/JWB2vlzMDWSuVv/IvaeU5q7PMAe4JWIb/iwqVAuS I7j53WhErqrDc6D/y8sJiBQkiNYzoRbWi09X8H08j9SihIpp9e/c4TCo5ZFBpuGe/QaaV6 wojdRzaJZeuPydSSGRuOAYqZz78EEJOHkfuhAhHCMZ6hBmOHnOe2QqHrpkYwD5j6DoTyXE Az5UuPaZO9N+eOICN5RR3TfG4UqL9dsG7jLYnCz8XqMgGReDscSqrLXFwdYxjQ== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1756565768; a=rsa-sha256; cv=none; b=bI9eBeFvbUEV7GSLImw6B0RH0DrJtGY5Vqc92OG0IVo4uHDCPcIDueyBvCwsUoV0yfVkzM CDrV6EEpLssZmhN00pfOGONYqCnNS4brCmMeMkVTy51TlmG8FcaToOj/W5hvIdMejCd3cz w3nx5/KYaFL9UdajoyZqxzhdvs8SP6769Ko71nx6O5xH5KVsFdGo6tEb8+k2XrwBovi2wl h51/COIaIiqLXonbFqsLgx8UsWuiK74vB8EQyOoBq2v3cZkNY8MnQdpLqUchA47V1x7tF9 R+awHILNsRH8y+UKTcyTesls0fqR1hYvYi29y8PDPIbLC7aU9lteQJRY0G0ZsQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4cDdVw3CDZzXKZ; Sat, 30 Aug 2025 14:56:08 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.18.1/8.18.1) with ESMTP id 57UEu8x5075859; Sat, 30 Aug 2025 14:56:08 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.18.1/8.18.1/Submit) id 57UEu8YP075856; Sat, 30 Aug 2025 14:56:08 GMT (envelope-from git) Date: Sat, 30 Aug 2025 14:56:08 GMT Message-Id: <202508301456.57UEu8YP075856@gitrepo.freebsd.org> To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org From: Michael Tuexen Subject: git: bed2299823b8 - main - syncache.4: add missing information List-Id: Commit messages for the main branch of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-main List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-main@freebsd.org Sender: owner-dev-commits-src-main@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: tuexen X-Git-Repository: src X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: bed2299823b8173fd791c0bbacc75ac224cecc0a Auto-Submitted: auto-generated The branch main has been updated by tuexen: URL: https://cgit.FreeBSD.org/src/commit/?id=bed2299823b8173fd791c0bbacc75ac224cecc0a commit bed2299823b8173fd791c0bbacc75ac224cecc0a Author: Michael Tuexen AuthorDate: 2025-08-30 14:53:08 +0000 Commit: Michael Tuexen CommitDate: 2025-08-30 14:53:08 +0000 syncache.4: add missing information Add the description for one sysctl-variable and three counters provided by netstat. Reviewed by: gbe, rscheff MFC after: 1 week Sponsored by: Netflix, Inc. Differential Revision: https://reviews.freebsd.org/D52226 --- share/man/man4/syncache.4 | 29 +++++++++++++++++++++++++++-- 1 file changed, 27 insertions(+), 2 deletions(-) diff --git a/share/man/man4/syncache.4 b/share/man/man4/syncache.4 index e92502fd15ff..f83e9b083e45 100644 --- a/share/man/man4/syncache.4 +++ b/share/man/man4/syncache.4 @@ -10,7 +10,7 @@ .\" notice, this list of conditions and the following disclaimer in the .\" documentation and/or other materials provided with the distribution. .\" -.Dd April 12, 2021 +.Dd August 30, 2025 .Dt SYNCACHE 4 .Os .Sh NAME @@ -39,6 +39,8 @@ MIBs for controlling TCP SYN caching .Nm sysctl Cm net.inet.tcp.syncache.count .It .Nm sysctl Cm net.inet.tcp.syncache.see_other +.It +.Nm sysctl Cm net.inet.tcp.syncache.rst_on_sock_fail .El .Sh DESCRIPTION The @@ -107,6 +109,18 @@ and run only with set .Va net.inet.tcp.syncookies_only to 1. +To use +.Nm syncookies +to handle bucket overflows in the +.Nm syncache +set +.Va net.inet.tcp.syncookies +to 1. +The default value for +.Va net.inet.tcp.syncookies_only +is 0 and the default value for +.Va net.inet.tcp.syncookies +is 1. .Pp The .Nm @@ -169,6 +183,9 @@ However, extra .Xr ucred 9 referencing is required on every incoming SYN packet processed. The default is off. +.It Va rst_on_sock_fail +Send a TCP RST segment if the socket allocation fails. +The default is on. .El .Pp Statistics on the performance of the @@ -206,8 +223,16 @@ Entries dropped due to ICMP unreachable messages. Failures to allocate new .Nm entry. +.It Li "cookies sent" +SYN cookies sent in SYN ACK segments. .It Li "cookies received" -Connections created from segment containing ACK. +ACK segments with valid syncookies which resulted in TCP connection +establishment. +.It Li "spurious cookies rejected" +Received ACKs, for which the syncache lookup failed and also no syncookie was +recently sent. +.It Li "failed cookies rejected" +Received ACKs for which the syncookie validation failed. .El .Sh SEE ALSO .Xr netstat 1 ,