ip: rate-limit the sending of ICMP error messages 49/35349/5
authorNeale Ranns <neale@graphiant.com>
Thu, 17 Feb 2022 09:08:47 +0000 (09:08 +0000)
committerOle Tr�an <otroan@employees.org>
Fri, 4 Mar 2022 16:14:11 +0000 (16:14 +0000)
commit5c6dd17a373a2c56e57f02426d66a79af7faa19c
tree154930db914285fda1636eb47faef2b1275e0190
parentbc91e86674d446e024a957318d42a3bbd3280bf1
ip: rate-limit the sending of ICMP error messages

Type: improvement

For error conditions, such as TTL expired, dest unreach, etc, Rate limit the sending of ICMP error messages.
The rate limiting is done based on src,dst IP address of the received packet.
the rate limit has been chosen, somewhat arbitrarily, to be 1e-3. This is the same limit as the ARP throttling.

Signed-off-by: Neale Ranns <neale@graphiant.com>
Change-Id: I4a0b791cde8c941a9bf37de6aa5da56779d3cef4
12 files changed:
src/vnet/ip/icmp4.c
src/vnet/ip/icmp6.c
test/framework.py
test/test_gso.py
test/test_ip4.py
test/test_ip6.py
test/test_mpls.py
test/test_mtu.py
test/test_nat44_ed.py
test/test_nat44_ei.py
test/test_punt.py
test/test_reassembly.py