mirror of
https://git.haproxy.org/git/haproxy.git/
synced 2025-08-06 07:07:04 +02:00
5232df57ab
This patch adds the support for the RFC2385 (Protection of BGP Sessions via the + TCP MD5 Signature Option) for the listeners and the servers. The feature is only available on Linux. Keywords are not exposed otherwise. By setting "tcp-md5sig <password>" option on a bind line, TCP segments of all connections instantiated from the listening socket will be signed with a 16-byte MD5 digest. The same option can be set on a server line to protect outgoing connections to the corresponding server. The primary use case for this option is to allow BGP to protect itself against the introduction of spoofed TCP segments into the connection stream. But it can be useful for any very long-lived TCP connections. A reg-test was added and it will be executed only on linux. All other targets are excluded. |
||
|---|---|---|
| .. | ||
| ca-auth.crt | ||
| cli_src_dst.vtc | ||
| client1.pem | ||
| common.pem | ||
| dispatch.vtc | ||
| h2_glitches.vtc | ||
| http_reuse_aggressive.vtc | ||
| http_reuse_always.vtc | ||
| http_reuse_be_transparent.vtc | ||
| http_reuse_conn_hash.vtc | ||
| http_reuse_dispatch.vtc | ||
| http_reuse_never.vtc | ||
| http_reuse_safe.vtc | ||
| proxy_protocol_random_fail.vtc | ||
| proxy_protocol_send_generic.vtc | ||
| proxy_protocol_send_unique_id_alpn.vtc | ||
| proxy_protocol_send_unique_id.vtc | ||
| proxy_protocol_tlv_validation.vtc | ||
| reverse_connect_full.vtc | ||
| reverse_server_name.vtc | ||
| reverse_server.vtc | ||
| tcp_md5_signature.vtc | ||
| tcp_to_http_upgrade.vtc | ||