]> git.ipfire.org Git - thirdparty/unbound.git/commit
Set IP_BIND_ADDRESS_NO_PORT on outbound tcp sockets 668/head
authorCristian Rodríguez <crodriguez@owncloud.com>
Sat, 23 Apr 2022 23:08:45 +0000 (23:08 +0000)
committerCristian Rodríguez <crodriguez@owncloud.com>
Sat, 23 Apr 2022 23:08:45 +0000 (23:08 +0000)
commit6a4ea692d4357487b92e6c12e722a42b3430050b
treeb3b6a24b753a48831b705dcd3d79c3a2c948fa77
parent1289c53c1ad698e51a7adf0271d63af992d78a33
Set IP_BIND_ADDRESS_NO_PORT on outbound tcp sockets

When bound to a local address the kernel does not know if the socket
will listen() or connect() and must reserve a port inmediately after
bind() effectively limiting the random port range to ~32k.
when IP_BIND_ADDRESS_NO_PORT is set, the kernel delays source port
allocation until the time the complete 4-tuple is known allowing
a much larger number of combinations
services/outside_network.c