mirror of
https://github.com/vincentmli/bpfire.git
synced 2026-04-09 10:35:53 +02:00
xdp-synproxy: drop IP don't fragment check
When XDP DDoS syncookie program is attached to red0 interface, green network client internet connection to website like gmail/youtube... failed. it is because these sites does not have IP DF flag set for each tcp packet, and syncookie_xdp program would drop these packets when they arrived at red0 interface. see https://github.com/vincentmli/BPFire/issues/59 Signed-off-by: Vincent Li <vincent.mc.li@gmail.com>
This commit is contained in:
@@ -41,7 +41,7 @@ objects = $(DL_FILE)
|
||||
|
||||
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
|
||||
|
||||
$(DL_FILE)_BLAKE2 = 82a0a8bf56a6ad98aa14d21552cb29f00f5ed4e8e2773200b03f0496505407e644867855982e37078e8521cc23b5e201b777dd74c8a36ed58c6421808b975e0a
|
||||
$(DL_FILE)_BLAKE2 = a1dd4088127a772f6cefb757f1da5c1ca6c68dab694edd9151fb9313194b7a1dc1388ff7c5cf91fa3857cc5f2fc972e764f511930c069cc80bdcbf8729a34b10
|
||||
|
||||
install : $(TARGET)
|
||||
|
||||
|
||||
Reference in New Issue
Block a user