gfwleak/stellar-stellar
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

bugfix: call duplicated packet filter too many times

Browse Source
This commit is contained in:
luwenpeng
2024-04-17 17:53:42 +08:00
parent 3771b68873
commit d57c81697f
9 changed files with 88 additions and 60 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
src/session/session_manager.cpp
View File

@@ -211,9 +211,9 @@ static int check_options(const struct session_manager_options *opts)
SESSION_LOG_ERROR("invalid tcp_reassembly_max_timeout: %u, supported range: [1, 60000]", opts->tcp_reassembly_max_timeout);
return -1;
}
if (opts->tcp_reassembly_max_segments < 2 || opts->tcp_reassembly_max_segments > 32)
if (opts->tcp_reassembly_max_segments < 2 || opts->tcp_reassembly_max_segments > 512)
{
SESSION_LOG_ERROR("invalid tcp_reassembly_max_segments: %u, supported range: [2, 32]", opts->tcp_reassembly_max_segments);
SESSION_LOG_ERROR("invalid tcp_reassembly_max_segments: %u, supported range: [2, 512]", opts->tcp_reassembly_max_segments);
return -1;
}
}
@@ -312,7 +312,7 @@ static void tcp_update(struct session_manager *mgr, struct session *sess, enum s
return;
}
if (flags & TH_SYN)
if (unlikely(flags & TH_SYN))
{
tcp_reassembly_set_recv_next(half->assembler, half->seq + 1);
}
@@ -630,7 +630,7 @@ static struct session *session_manager_new_tcp_session(struct session_manager *m
session_timer_update(mgr->sess_timer, sess, now + timeout);
session_table_add(mgr->tcp_sess_table, key, sess);
if (session_get_stat(sess, dir, STAT_RAW_PKTS_RX) < 3 && mgr->opts.duplicated_packet_filter_enable)
if (mgr->opts.duplicated_packet_filter_enable)
{
duplicated_packet_filter_add(mgr->dup_pkt_filter, pkt, now);
}
@@ -696,11 +696,6 @@ static int session_manager_update_tcp_session(struct session_manager *mgr, struc
// update tcp
tcp_update(mgr, sess, dir, tcp_layer, now);
if (mgr->opts.duplicated_packet_filter_enable)
{
duplicated_packet_filter_add(mgr->dup_pkt_filter, pkt, now);
}
// set closing reason
if (next_state == SESSION_STATE_CLOSING && !session_get_closing_reason(sess))
{

2
src/session/session_manager.h
View File

@@ -49,7 +49,7 @@ struct session_manager_options
// TCP reassembly
uint8_t tcp_reassembly_enable;
uint32_t tcp_reassembly_max_timeout; // range: [1, 60000] (ms)
uint32_t tcp_reassembly_max_segments; // range: [2, 32]
uint32_t tcp_reassembly_max_segments; // range: [2, 512]
};
struct session_manager_stat

62
src/session/session_private.h
View File

@@ -15,7 +15,7 @@ extern "C"
#include "tcp_reassembly.h"
#include "session_manager.h"
#define EX_DATA_MAX_COUNT 16
#define EX_DATA_MAX_COUNT 4
// tuple6 str format: "src_addr:src_port -> dst_addr:dst_port, proto: ip_proto, domain: domain"
// tuple6 max len: 46 + 1 + 5 + 4 + 46 + 1 + 5 + 9 + 1 + 10 + 20 = 107
@@ -31,35 +31,39 @@ struct tcp_half
uint8_t flags;
};
struct session
/*
* sizeof(struct session) = 1024 bytes
* max thread number = 128
* per thread max tcp session number = 50000
* per thread max udp session number = 50000
*
* session memory usage = 128 * (50000 + 50000) * 1024 = 13107200000 bytes = 12.2 GB
*/
struct session // 1024 bytes
{
int dup;
uint64_t id;
uint64_t stats[MAX_DIRECTION][MAX_STAT];
uint64_t timestamps[MAX_TIMESTAMP];
struct tuple6 tuple;
char tuple_str[TUPLE6_STR_SIZE];
enum session_direction tuple_dir;
enum session_direction cur_dir;
enum session_type type;
enum session_state state;
enum closing_reason reason;
const struct packet *first_pkt[MAX_DIRECTION];
const struct packet *curr_pkt;
void *ex_data[EX_DATA_MAX_COUNT];
void *user_data;
struct tcp_half tcp_halfs[MAX_DIRECTION];
struct timeout timeout; // used for timer
struct list_head lru; // used for lru queue
struct list_head free; // used for free queue
struct list_head evicte; // used for evicte queue
UT_hash_handle hh; // used for hash table
struct session_manager_stat *mgr_stat;
uint64_t id; // 8 bytes
uint64_t stats[MAX_DIRECTION][MAX_STAT]; // 480 bytes
uint64_t timestamps[MAX_TIMESTAMP]; // 16 bytes
struct tcp_half tcp_halfs[MAX_DIRECTION]; // 80 bytes
struct timeout timeout; // 72 bytes -- used for timer
struct list_head lru; // 16 bytes -- used for lru queue
struct list_head free; // 16 bytes -- used for free queue
struct list_head evicte; // 16 bytes -- used for evicte queue
UT_hash_handle hh; // 56 bytes -- used for hash table
struct tuple6 tuple; // 56 bytes
char tuple_str[TUPLE6_STR_SIZE]; // 108 bytes
const struct packet *first_pkt[MAX_DIRECTION]; // 16 bytes
const struct packet *curr_pkt; // 8 bytes
void *ex_data[EX_DATA_MAX_COUNT]; // 32 bytes
void *user_data; // 8 bytes
int is_symmetric; // 4 bytes
int dup; // 4 bytes
enum session_direction tuple_dir; // 4 bytes
enum session_direction cur_dir; // 4 bytes
enum session_type type; // 4 bytes
enum session_state state; // 4 bytes
enum closing_reason reason; // 4 bytes
struct session_manager_stat *mgr_stat; // 8 bytes
};
void session_init(struct session *sess);