Re: [PATCH net-next] tcp: Enable TFO without a cookie on a per-socket basis

2017-10-17 Thread Christoph Paasch
On 17/10/17 - 10:26:58, Yuchung Cheng wrote: > On Mon, Oct 16, 2017 at 11:37 PM, Christoph Paasch wrote: > > We already allow to enable TFO without a cookie by using the > > fastopen-sysctl and setting it to TFO_SERVER_COOKIE_NOT_REQD (0x200). > > This is safe to do in certain environments where w

Re: [PATCH net-next] tcp: Enable TFO without a cookie on a per-socket basis

2017-10-17 Thread Yuchung Cheng
On Mon, Oct 16, 2017 at 11:37 PM, Christoph Paasch wrote: > We already allow to enable TFO without a cookie by using the > fastopen-sysctl and setting it to TFO_SERVER_COOKIE_NOT_REQD (0x200). > This is safe to do in certain environments where we know that there > isn't a malicous host (aka., data

Re: [PATCH net-next] tcp: Enable TFO without a cookie on a per-socket basis

2017-10-17 Thread Christoph Paasch
On 17/10/17 - 04:00:01, Eric Dumazet wrote: > On Mon, Oct 16, 2017 at 11:37 PM, Christoph Paasch wrote: > > We already allow to enable TFO without a cookie by using the > > fastopen-sysctl and setting it to TFO_SERVER_COOKIE_NOT_REQD (0x200). > > This is safe to do in certain environments where we

Re: [PATCH net-next] tcp: Enable TFO without a cookie on a per-socket basis

2017-10-17 Thread Eric Dumazet
On Mon, Oct 16, 2017 at 11:37 PM, Christoph Paasch wrote: > We already allow to enable TFO without a cookie by using the > fastopen-sysctl and setting it to TFO_SERVER_COOKIE_NOT_REQD (0x200). > This is safe to do in certain environments where we know that there > isn't a malicous host (aka., data