AltraMayor / AltraMayor/gatekeeper

Implementing syncookied as a request BPF

Abierto
#699 0 comentarios 0 reacciones 0 asignados Ver en GitHub
enhancement
Lenguaje dominante
C
Estrellas
1.6k
Forks
252
Métricas de merge de PR
Sin PR fusionados en 30 d

Descripción

Once issue #602 is implemented, the effort to enable the implementation of [syncookied](https://github.com/LTD-Beget/syncookied) as a request BPF will have been lowered. Namely, it would require adding the following facilities to the running environment of BPF in Gatekeeper:
1. Repling packets;
2. Computing SYN cookie.

The request BPF implementing syncookied should only forward SYN packets with proper cookies to Grantor servers. This BPF must also limit the reply rate to SYN packets to avoid Gatekeeper servers being used on reflection attacks.

The syncookied BPF would be a variation of [the port knocking originally suggested](https://github.com/AltraMayor/gatekeeper/issues/602#issuecomment-1248063769) in issue #602.

Guía de contribución

No hay ninguna guía de contribución indexada para este repositorio

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.