tcp bbr: improve retransmit timout calculation
The retransmission timeout should the srtt + 4 * rttvar.
The srtt is using 5 bits of fractions and rttvar is using 4 bits of
fractions, some specific shifting is required.
Reviewed by: Peter Lei
MFC after: 3 days
MFC to: stable/15
Sponsored by: Netflix, Inc.
Differential Revision: https://reviews.freebsd.org/D61581
tcp bbr: improve invalidating rtt
Invalidate the rtt based on t_rxtshift instead of resetting t_srtt to 0,
because using the latter also affects the retransmission timeout.
Reviewed by: Peter Lei
MFC after: Netflix, Inc.
MFC to: stable/15
Sponsored by: Netflix, Inc.
Differential Revision: https://reviews.freebsd.org/D61585
tcp bbr: improve retransmit timout calculation
The retransmission timeout should the srtt + 4 * rttvar.
The srtt is using 5 bits of fractions and rttvar is using 4 bits of
fractions, some specific shifting is required.
Reviewed by: Peter Lei
MFC after: 3 days
MFC to: stable/15
Sponsored by: Netflix, Inc.
Differential Revision: https://reviews.freebsd.org/D61586
if_bridge: Use bridge's FIB for incoming unicasts
A unicast frame for the bridge is handed to the stack with rcvif set
to the bridge, but it kept the FIB of the member it arrived on. With
the bridge in another FIB, replies were looked up in the wrong routing
table and dropped.
Set the FIB of the bridge on such frames. If member_ifaddrs is
enabled and the bridge inherited its MAC address from a member, keep
the old behaviour, since the frame may be for an address configured on
that member.
Reviewed by: zlei
Differential Revision: https://reviews.freebsd.org/D61517
devel/detect-it-easy: [NEW PORT] program for determining types of files
Detect It Easy (DiE) is a cross-platform tool for file identification and
static inspection, used by malware analysts, cybersecurity experts, and
reverse engineers. It combines native format parsers with an extensible
DiE-JS analysis layer, supporting both compact signatures and multi-stage
static analysis across Windows, Linux, macOS, and now FreeBSD.
Co-authored-by: Michael Osipov <michaelo at FreeBSD.org>
WWW: https://github.com/horsicq/Detect-It-Easy
PR: 297334
www/nginx-module-auth-ldap: Update to 0.3.0
The bind password can now be read from a file, auth_ldap takes a variable
as its realm and off turns the check off per request, user_filter matches
the login against several attributes at once, user_attributes hands the
user DN and named attributes on as variables, and a refused login leaves a
line naming the user and the server.
Changelog: https://github.com/sysadmin-labs/nginx-auth-ldap-module/releases/tag/v0.3.0
Sponsored by: Netzkommune GmbH
