From: Rick Jones <rick.jones2@hp.com>
To: Eric Dumazet <eric.dumazet@gmail.com>
Cc: David Miller <davem@davemloft.net>, netdev <netdev@vger.kernel.org>
Subject: Re: [RFC] tcp: randomize TCP source ports
Date: Fri, 08 Nov 2013 15:26:24 -0800 [thread overview]
Message-ID: <527D7320.4050008@hp.com> (raw)
In-Reply-To: <1383876294.9412.136.camel@edumazet-glaptop2.roam.corp.google.com>
On 11/07/2013 06:04 PM, Eric Dumazet wrote:
> On Thu, 2013-11-07 at 17:07 -0800, Rick Jones wrote:
>
>> For perhaps most definitions of well deployed. There is at least one
>> load balancer which, while it offers TCP Window Scaling, does not also
>> offer TCP Time Stamps...
>>
>> By rights they should (must) be offering TCP Time Stamps, and they are,
>> I am told, "working on it."
>>
>> Is all going to be "well" when it is the (non-Linux) remote system which
>> has the TIME_WAIT endpoint?
>
> Hey, tell us why netperf does a bind(port=0, addr=ANY) and SO_REUSEADDR
> tricks before connect()
>
> It seems you do request randomization, but you do not want it for
> applications written by innocent people...
That bind() call is not there to request randomization of the TCP source
port.
The bind() call in src/nettest_bsd.c/create_data_socket() is so
netserver can report a port number back to netperf. It is also there so
a TCP_CRR test can explicitly use more than the configured ephemeral
port range. It is also used when setting explicit port numbers for
getting through firewalls.
In the establish_control() path the bind() call is also there to allow
specifying an explicit port number for the control connection. I just
don't bother avoiding the call when someone hasn't selected an explicit
client-side port number for the control connection.
happy benchmarking,
rick jones
next prev parent reply other threads:[~2013-11-08 23:26 UTC|newest]
Thread overview: 15+ messages / expand[flat|nested] mbox.gz Atom feed top
2013-11-08 0:54 [RFC] tcp: randomize TCP source ports Eric Dumazet
2013-11-08 1:07 ` Rick Jones
2013-11-08 2:04 ` Eric Dumazet
2013-11-08 23:26 ` Rick Jones [this message]
2013-11-08 23:42 ` Eric Dumazet
2013-11-08 23:57 ` Rick Jones
2013-11-08 13:02 ` Hannes Frederic Sowa
2013-11-08 14:03 ` Eric Dumazet
2013-11-08 14:28 ` Hannes Frederic Sowa
2013-11-08 15:11 ` Eric Dumazet
2013-11-08 17:39 ` Hannes Frederic Sowa
2013-11-09 4:47 ` Hannes Frederic Sowa
2013-11-09 15:26 ` Loganaden Velvindron
2013-11-09 18:16 ` Daniel Borkmann
2013-11-09 20:54 ` Hannes Frederic Sowa
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=527D7320.4050008@hp.com \
--to=rick.jones2@hp.com \
--cc=davem@davemloft.net \
--cc=eric.dumazet@gmail.com \
--cc=netdev@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox