UPSTREAM: wireguard: receive: drop handshakes if queue lock is contended
If we're being delivered packets from multiple CPUs so quickly that the ring lock is contended for CPU tries, then it's safe to assume that the queue is near capacity anyway, so just drop the packet rather than spinning. This helps deal with multicore DoS that can interfere with data path performance. It _still_ does not completely fix the issue, but it again chips away at it. Bug: 254441685 Reported-by:Streun Fabio <fstreun@student.ethz.ch> Fixes: e7096c131e51 ("net: WireGuard secure network tunnel") Signed-off-by:
Jason A. Donenfeld <Jason@zx2c4.com> Signed-off-by:
Jakub Kicinski <kuba@kernel.org> (cherry picked from commit fb32f4f606c17b869805d7cede8b03d78339b50a) Signed-off-by:
Lee Jones <joneslee@google.com> Change-Id: Ifa280bd0891b5987c672b24d9800afa44e7dc12c
Loading
Please register or sign in to comment