Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit e6c022a4 authored by Eric Dumazet's avatar Eric Dumazet Committed by David S. Miller
Browse files

tcp: better retrans tracking for defer-accept 



For passive TCP connections using TCP_DEFER_ACCEPT facility,
we incorrectly increment req->retrans each time timeout triggers
while no SYNACK is sent.

SYNACK are not sent for TCP_DEFER_ACCEPT that were established (for
which we received the ACK from client). Only the last SYNACK is sent
so that we can receive again an ACK from client, to move the req into
accept queue. We plan to change this later to avoid the useless
retransmit (and potential problem as this SYNACK could be lost)

TCP_INFO later gives wrong information to user, claiming imaginary
retransmits.

Decouple req->retrans field into two independent fields :

num_retrans : number of retransmit
num_timeout : number of timeouts

num_timeout is the counter that is incremented at each timeout,
regardless of actual SYNACK being sent or not, and used to
compute the exponential timeout.

Introduce inet_rtx_syn_ack() helper to increment num_retrans
only if ->rtx_syn_ack() succeeded.

Use inet_rtx_syn_ack() from tcp_check_req() to increment num_retrans
when we re-send a SYNACK in answer to a (retransmitted) SYN.
Prior to this patch, we were not counting these retransmits.

Change tcp_v[46]_rtx_synack() to increment TCP_MIB_RETRANSSEGS
only if a synack packet was successfully queued.

Reported-by: default avatarYuchung Cheng <ycheng@google.com>
Signed-off-by: default avatarEric Dumazet <edumazet@google.com>
Cc: Julian Anastasov <ja@ssi.bg>
Cc: Vijay Subramanian <subramanian.vijay@gmail.com>
Cc: Elliott Hughes <enh@google.com>
Cc: Neal Cardwell <ncardwell@google.com>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent 25b1e679

include/net/request_sock.h

+8 −4
Original line number Diff line number Diff line
@@ -49,13 +49,16 @@ struct request_sock_ops { 
					   struct request_sock *req);

};



extern int inet_rtx_syn_ack(struct sock *parent, struct request_sock *req);



/* struct request_sock - mini sock to represent a connection request

 */

struct request_sock {

	struct request_sock		*dl_next; /* Must be first member! */

	u16				mss;

	u8				retrans;

	u8				cookie_ts; /* syncookie: encode tcpopts in timestamp */

	u8				num_retrans; /* number of retransmits */

	u8				cookie_ts:1; /* syncookie: encode tcpopts in timestamp */

	u8				num_timeout:7; /* number of timeouts */

	/* The following two fields can be easily recomputed I think -AK */

	u32				window_clamp; /* window clamp at creation time */

	u32				rcv_wnd;	  /* rcv_wnd offered first time */
@@ -231,7 +234,7 @@ static inline int reqsk_queue_removed(struct request_sock_queue *queue, 
{

	struct listen_sock *lopt = queue->listen_opt;



	if (req->retrans == 0)

	if (req->num_timeout == 0)

		--lopt->qlen_young;



	return --lopt->qlen;
@@ -269,7 +272,8 @@ static inline void reqsk_queue_hash_req(struct request_sock_queue *queue, 
	struct listen_sock *lopt = queue->listen_opt;



	req->expires = jiffies + timeout;

	req->retrans = 0;

	req->num_retrans = 0;

	req->num_timeout = 0;

	req->sk = NULL;

	req->dl_next = lopt->syn_table[hash];

net/dccp/minisocks.c

+1 −2
Original line number Diff line number Diff line
@@ -174,8 +174,7 @@ struct sock *dccp_check_req(struct sock *sk, struct sk_buff *skb, 
			 * To protect against Request floods, increment retrans

			 * counter (backoff, monitored by dccp_response_timer).

			 */

			req->retrans++;

			req->rsk_ops->rtx_syn_ack(sk, req, NULL);

			inet_rtx_syn_ack(sk, req);

		}

		/* Network Duplicate, discard packet */

		return NULL;

net/ipv4/inet_connection_sock.c

+18 −7
Original line number Diff line number Diff line
@@ -521,21 +521,31 @@ static inline void syn_ack_recalc(struct request_sock *req, const int thresh, 
				  int *expire, int *resend)

{

	if (!rskq_defer_accept) {

		*expire = req->retrans >= thresh;

		*expire = req->num_timeout >= thresh;

		*resend = 1;

		return;

	}

	*expire = req->retrans >= thresh &&

		  (!inet_rsk(req)->acked || req->retrans >= max_retries);

	*expire = req->num_timeout >= thresh &&

		  (!inet_rsk(req)->acked || req->num_timeout >= max_retries);

	/*

	 * Do not resend while waiting for data after ACK,

	 * start to resend on end of deferring period to give

	 * last chance for data or ACK to create established socket.

	 */

	*resend = !inet_rsk(req)->acked ||

		  req->retrans >= rskq_defer_accept - 1;

		  req->num_timeout >= rskq_defer_accept - 1;

}



int inet_rtx_syn_ack(struct sock *parent, struct request_sock *req)

{

	int err = req->rsk_ops->rtx_syn_ack(parent, req, NULL);



	if (!err)

		req->num_retrans++;

	return err;

}

EXPORT_SYMBOL(inet_rtx_syn_ack);



void inet_csk_reqsk_queue_prune(struct sock *parent,

				const unsigned long interval,

				const unsigned long timeout,
@@ -599,13 +609,14 @@ void inet_csk_reqsk_queue_prune(struct sock *parent, 
				req->rsk_ops->syn_ack_timeout(parent, req);

				if (!expire &&

				    (!resend ||

				     !req->rsk_ops->rtx_syn_ack(parent, req, NULL) ||

				     !inet_rtx_syn_ack(parent, req) ||

				     inet_rsk(req)->acked)) {

					unsigned long timeo;



					if (req->retrans++ == 0)

					if (req->num_timeout++ == 0)

						lopt->qlen_young--;

					timeo = min((timeout << req->retrans), max_rto);

					timeo = min(timeout << req->num_timeout,

						    max_rto);

					req->expires = now + timeo;

					reqp = &req->dl_next;

					continue;

net/ipv4/inet_diag.c

+1 −1
Original line number Diff line number Diff line
@@ -620,7 +620,7 @@ static int inet_diag_fill_req(struct sk_buff *skb, struct sock *sk, 
	r->idiag_family = sk->sk_family;

	r->idiag_state = TCP_SYN_RECV;

	r->idiag_timer = 1;

	r->idiag_retrans = req->retrans;

	r->idiag_retrans = req->num_retrans;



	r->id.idiag_if = sk->sk_bound_dev_if;

	sock_diag_save_cookie(req, r->id.idiag_cookie);

net/ipv4/syncookies.c

+1 −1
Original line number Diff line number Diff line
@@ -340,7 +340,7 @@ struct sock *cookie_v4_check(struct sock *sk, struct sk_buff *skb, 
	}



	req->expires	= 0UL;

	req->retrans	= 0;

	req->num_retrans = 0;



	/*

	 * We need to lookup the route here to get at the correct