wireguard: add handshake rate limiting support 15/36715/5
authorAlexander Chernavin <achernavin@netgate.com>
Wed, 20 Jul 2022 13:01:42 +0000 (13:01 +0000)
committerMatthew Smith <mgsmith@netgate.com>
Tue, 9 Aug 2022 15:42:43 +0000 (15:42 +0000)
commita6328e51e0c831ba3f0f4977f776491ac44eaec5
tree2824c830f35554ed16887be32065d48f66809c34
parentfd2417b2a42e34062e3d07875e5c4e11922513d5
wireguard: add handshake rate limiting support

Type: feature

With this change, if being under load a handshake message with both
valid mac1 and mac2 is received, the peer will be rate limited. Cover
this with tests.

Signed-off-by: Alexander Chernavin <achernavin@netgate.com>
Change-Id: Id8d58bb293a7975c3d922c48b4948fd25e20af4b
src/plugins/wireguard/FEATURE.yaml
src/plugins/wireguard/README.rst
src/plugins/wireguard/wireguard_cookie.c
src/plugins/wireguard/wireguard_cookie.h
src/plugins/wireguard/wireguard_if.c
src/plugins/wireguard/wireguard_input.c
test/test_wireguard.py