mir/isc-dhcp
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/dhcp synced 2025-09-03 07:45:20 +00:00
Code Issues Releases Wiki Activity

[master] Add patch to limit the value of an fd we accept for a connection.

Browse Source 
By limiting the highest value we accept for an fd we limit the number
of connections.
This commit is contained in:
Shawn Routhier
2016-03-04 12:16:52 -08:00
parent cc1bd34e09
commit 0b209ea5cc
3 changed files with 17 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
RELNOTES
View File

@@ -254,6 +254,10 @@ by Eric Young (eay@cryptsoft.com).
escapes, and hex - unquoted, colon separated hex digits. escapes, and hex - unquoted, colon separated hex digits.
[ISC-Busg #26378] [ISC-Busg #26378]
! Add an option in site.h to limit the number of failover and control
connections the server will accept. By default this is 200.
[ISC-Bugs #41845]
Changes since 4.3.3b1 Changes since 4.3.3b1
- None - None

6
includes/site.h
View File

@@ -312,6 +312,12 @@
default. */ default. */
#define PRINT_SPECIFIC_CL_ERRORS #define PRINT_SPECIFIC_CL_ERRORS
/* Limit the value of a file descriptor the serve will use
when accepting a connecting request. This can be used to
limit the number of TCP connections that the server will
allow at one time. A value of 0 means there is no limit.*/
#define MAX_FD_VALUE 200
/* Include definitions for various options. In general these /* Include definitions for various options. In general these
should be left as is, but if you have already defined one should be left as is, but if you have already defined one
of these and prefer your definition you can comment the of these and prefer your definition you can comment the

9
omapip/listener.c
View File

@@ -3,7 +3,7 @@
Subroutines that support the generic listener object. */ Subroutines that support the generic listener object. */
/* /*
* Copyright (c) 2012,2014 by Internet Systems Consortium, Inc. ("ISC") * Copyright (c) 2012,2014,2016 by Internet Systems Consortium, Inc. ("ISC")
* Copyright (c) 2004,2007,2009 by Internet Systems Consortium, Inc. ("ISC") * Copyright (c) 2004,2007,2009 by Internet Systems Consortium, Inc. ("ISC")
* Copyright (c) 1999-2003 by Internet Software Consortium * Copyright (c) 1999-2003 by Internet Software Consortium
* *
@@ -233,7 +233,12 @@ isc_result_t omapi_accept (omapi_object_t *h)
return ISC_R_NORESOURCES; return ISC_R_NORESOURCES;
return ISC_R_UNEXPECTED; return ISC_R_UNEXPECTED;
} }
if ((MAX_FD_VALUE != 0) && (socket > MAX_FD_VALUE)) {
close(socket);
return (ISC_R_NORESOURCES);
}
#if defined (TRACING) #if defined (TRACING)
/* If we're recording a trace, remember the connection. */ /* If we're recording a trace, remember the connection. */
if (trace_record ()) { if (trace_record ()) {