mirror of
https://github.com/opnsense/src.git
synced 2026-02-17 01:31:45 -05:00
34a5582c47
Redirect (and temporal) route expiration was broken a while ago. This change brings route expiration back, with unified IPv4/IPv6 handling code. It introduces net.inet.icmp.redirtimeout sysctl, allowing to set an expiration time for redirected routes. It defaults to 10 minutes, analogues with net.inet6.icmp6.redirtimeout. Implementation uses separate file, route_temporal.c, as route.c is already bloated with tons of different functions. Internally, expiration is implemented as an per-rnh callout scheduled when route with non-zero rt_expire time is added or rt_expire is changed. It does not add any overhead when no temporal routes are present. Callout traverses entire routing tree under wlock, scheduling expired routes for deletion and calculating the next time it needs to be run. The rationale for such implemention is the following: typically workloads requiring large amount of routes have redirects turned off already, while the systems with small amount of routes will not inhibit large overhead during tree traversal. This changes also fixes netstat -rn display of route expiration time, which has been broken since the conversion from kread() to sysctl. Reviewed by: bz MFC after: 3 weeks Differential Revision: https://reviews.freebsd.org/D23075 |
||
|---|---|---|
| .. | ||
| fibs_test.sh | ||
| ip_reass_test.c | ||
| Makefile | ||
| Makefile.depend | ||
| redirect.py | ||
| redirect.sh | ||
| so_reuseport_lb_test.c | ||
| socket_afinet.c | ||
| tcp_user_cookie.c | ||
| udp_dontroute.c | ||