diff options
| author | Martin Willi <martin@revosec.ch> | 2012-04-17 09:36:39 +0200 |
|---|---|---|
| committer | Martin Willi <martin@revosec.ch> | 2012-04-17 10:02:21 +0200 |
| commit | 1b7debcc040189f2090c0759c34eaa4037a6c4c9 (patch) | |
| tree | d79f69eda6b892ad441c628e8b142e62c6c38ed9 /src/conftest/hooks | |
| parent | d0d600e1ef8d2a4e5fedeb57bd5fda5650b63b48 (diff) | |
| download | strongswan-1b7debcc040189f2090c0759c34eaa4037a6c4c9.tar.bz2 strongswan-1b7debcc040189f2090c0759c34eaa4037a6c4c9.tar.xz | |
Keep COOKIEs enabled once threshold is hit, until we see no COOKIEs for a few secs
Toggling COOKIEs on/off is problematic: After doing a COOKIE exchange as
initiator, we can't know if the completing IKE_SA_INIT message is to our first
request or the one with the COOKIE. If the responder just enabled/disabled
COOKIEs and packets get retransmitted, both might be true. Avoiding COOKIE
behavior toggling improves the situation, but does not solve the problem during
the initial COOKIE activation.
Diffstat (limited to 'src/conftest/hooks')
0 files changed, 0 insertions, 0 deletions