Thread (32 messages) 32 messages, 6 authors, 2007-03-29

Re: RFC: Established connections hash function

From: Evgeniy Polyakov <hidden>
Date: 2007-03-23 08:07:35

On Thu, Mar 22, 2007 at 01:58:34PM -0700, David Miller (davem@davemloft.net) wrote:
From: "Nikolaos D. Bougalis" <redacted>
Date: Thu, 22 Mar 2007 12:44:09 -0700
quoted
    People _have_ had problems. _I_ have had problems. And when
someone with a few thousand drones under his control hoses your
servers because he can do math and he leaves you with 20000-item
long chains, _you_ will have problems.
No need to further argue this point, the people that matter
(ie. me :-) understand it, don't worry..
Call me a loooser which mail will be deleted on arrival, but...

jhash_2words(const, const, ((const << 16) | $sport) ^ $random)

where $sport is 1-65535 in a loop, and $random is pseudo-random number
obtained on start.

Which is exactly the case of web server and attacker connects to 80 port
from the same IP address and different source ports.

Result with jenkins:
1 23880
2 12108
3 4040
4 1019
5 200
6 30
7 8
8 1

Xor:
1 65536


Please, do not apply patch as is, I will devote this day to find where
jenkins has problems and try to fix distribution. If I will fail, then
it is up to you to decide that above results are bad or good.

Thank you.

-- 
	Evgeniy Polyakov
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help