From nobody Mon Nov 20 13:46:27 2023 X-Original-To: freebsd-hackers@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4SYphB5bQQz51KVg for ; Mon, 20 Nov 2023 13:46:34 +0000 (UTC) (envelope-from void@f-m.fm) Received: from wout1-smtp.messagingengine.com (wout1-smtp.messagingengine.com [64.147.123.24]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4SYph945YVz4Fcm for ; Mon, 20 Nov 2023 13:46:33 +0000 (UTC) (envelope-from void@f-m.fm) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=f-m.fm header.s=fm1 header.b=OpGLERPa; dkim=pass header.d=messagingengine.com header.s=fm1 header.b=xzE3gvOa; spf=pass (mx1.freebsd.org: domain of void@f-m.fm designates 64.147.123.24 as permitted sender) smtp.mailfrom=void@f-m.fm; dmarc=pass (policy=none) header.from=f-m.fm Received: from compute3.internal (compute3.nyi.internal [10.202.2.43]) by mailout.west.internal (Postfix) with ESMTP id A42CA3200A2F for ; Mon, 20 Nov 2023 08:46:31 -0500 (EST) Received: from mailfrontend2 ([10.202.2.163]) by compute3.internal (MEProxy); Mon, 20 Nov 2023 08:46:31 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=f-m.fm; h=cc :content-type:content-type:date:date:from:from:in-reply-to :message-id:mime-version:reply-to:sender:subject:subject:to:to; s=fm1; t=1700487991; x=1700574391; bh=8dfIgMahxP4dGElVQ48QreD1Y 7EBBnedkcpdNZsQ0XU=; b=OpGLERPaw1c4acP7qp5L55ZMlADuRfnDSSg9lAYJr Qt0sLCZyXTzzJTLBi7EBMkKzMGz1JC8QofzTJ6pNb3QB8Jnf64hfXniEVYEVSIUg 0YchYSqXp9nYU8GGFYlpwLfCPVRtzh8I3tW4nGBLMrCqXziSN343bSZv4oUO/Pu4 XG0+wt5MzrSUptZeX2pgRdgs00sPZfn+lrs/kVbwLqr2pIyr7Lqq9x0QfOaiF8Gq ZSrfcmg2tjFluxeAahZPkH5m5ac0EkSSw4xlz89T6BvbtUXlFe1bkL3nMWwMSpq4 9yx6KEytD7RztDuK4mocqgrFse1z1JElmWY5u0pN+YO+w== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:content-type:date:date :feedback-id:feedback-id:from:from:in-reply-to:message-id :mime-version:reply-to:sender:subject:subject:to:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm1; t= 1700487991; x=1700574391; bh=8dfIgMahxP4dGElVQ48QreD1Y7EBBnedkcp dNZsQ0XU=; b=xzE3gvOagEaTKQtakMy6mJF4Sux8cL9x9WUqH20bhP4BMtQ/8Ne 9RnZawKy45chnyUv09mOkpM9PZIz8LgRSsL/8i1CgfUiQRs47/rQhkaTyW7XZLhs DiyhyNr0mawyfas/3jru3ugVhm0giiOZ7a8xUGQFSMKLjAuUq9DKuzKvWVq78v0P QcxrKWPEJvXNRmzyG0iSbR3L5l3eBfItiZKyQ/FzrRlBzYAgZV9cHlFGQdE6MzSo 97uc0gL2qv04k1bc3k3y2dKXsziCylTYQZFjCyo/uRGt1/9PaAOX5BdIVoVK4wlv 4JYejF+qlLyIR1b2fJGQaXsXrWBS8GHfZOA== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvkedrudegjedgvdelucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucenucfjughrpeffhffvuffkgggtugesthdtredttd dtvdenucfhrhhomhepvhhoihguuceovhhoihgusehfqdhmrdhfmheqnecuggftrfgrthht vghrnhepueeuieffffejlefffeetudelheevveehkeeuvefgfeffgeefleekgeekkeekve evnecuffhomhgrihhnpehklhgrrhgrshihshhtvghmshdrtghomhenucevlhhushhtvghr ufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehvohhiugesfhdqmhdrfhhm X-ME-Proxy: Feedback-ID: i2541463c:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Mon, 20 Nov 2023 08:46:30 -0500 (EST) Date: Mon, 20 Nov 2023 13:46:27 +0000 From: void To: freebsd-hackers@freebsd.org Subject: the RATELIMIT kernel option Message-ID: Mail-Followup-To: freebsd-hackers@freebsd.org List-Id: Technical discussions relating to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-hackers List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-hackers@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Disposition: inline X-Spamd-Result: default: False [-5.00 / 15.00]; NEURAL_HAM_SHORT(-1.00)[-1.000]; DWL_DNSWL_LOW(-1.00)[messagingengine.com:dkim]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; MID_RHS_NOT_FQDN(0.50)[]; DMARC_POLICY_ALLOW(-0.50)[f-m.fm,none]; RWL_MAILSPIKE_EXCELLENT(-0.40)[64.147.123.24:from]; R_DKIM_ALLOW(-0.20)[f-m.fm:s=fm1,messagingengine.com:s=fm1]; R_SPF_ALLOW(-0.20)[+ip4:64.147.123.24]; MIME_GOOD(-0.10)[text/plain]; RCVD_IN_DNSWL_LOW(-0.10)[64.147.123.24:from]; FROM_HAS_DN(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[freebsd-hackers@freebsd.org]; RCPT_COUNT_ONE(0.00)[1]; ARC_NA(0.00)[]; RCVD_TLS_LAST(0.00)[]; ASN(0.00)[asn:29838, ipnet:64.147.123.0/24, country:US]; RCVD_COUNT_THREE(0.00)[3]; TO_DN_NONE(0.00)[]; FREEMAIL_FROM(0.00)[f-m.fm]; MLMMJ_DEST(0.00)[freebsd-hackers@freebsd.org]; DKIM_TRACE(0.00)[f-m.fm:+,messagingengine.com:+]; MIME_TRACE(0.00)[0:+]; FROM_EQ_ENVFROM(0.00)[]; FREEMAIL_ENVFROM(0.00)[f-m.fm]; RCVD_VIA_SMTP_AUTH(0.00)[] X-Rspamd-Queue-Id: 4SYph945YVz4Fcm X-Spamd-Bar: ---- Hello hackers@, I've been looking at adding the RACK tcp kernel option, and reading the instructions on https://klarasystems.com/articles/using-the-freebsd-rack-tcp-stack/ They mention the RATELIMIT option for some network cards but I can find no option of that name in LINT/NOTES so am not sure if it works with just some or all network interfaces or what the tradeoffs are. Can anyone here clarify please? or just point me to whatever I need to look at, thanks --