reflect_filter.h

Go to the documentation of this file.

/*
 *  OpenVPN -- An application to securely tunnel IP networks
 *             over a single TCP/UDP port, with support for SSL/TLS-based
 *             session authentication and key exchange,
 *             packet encryption, packet authentication, and
 *             packet compression.
 *
 *  Copyright (C) 2022-2024 OpenVPN Inc <sales@openvpn.net>
 *
 *  This program is free software; you can redistribute it and/or modify
 *  it under the terms of the GNU General Public License version 2
 *  as published by the Free Software Foundation.
 *
 *  This program is distributed in the hope that it will be useful,
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 *  GNU General Public License for more details.
 *
 *  You should have received a copy of the GNU General Public License along
 *  with this program; if not, write to the Free Software Foundation, Inc.,
 *  51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
 */
#ifndef REFLECT_FILTER_H
#define REFLECT_FILTER_H
 
#include <limits.h>
 
struct initial_packet_rate_limit {
    int64_t max_per_period;
 
    int period_length;
 
    int64_t curr_period_counter;
 
    /* Last time we reset our timer */
    time_t last_period_reset;
 
    /* we want to warn once per period that packets are being started to
     * be dropped */
    bool warning_displayed;
};
struct initial_packet_rate_limit {…};
 
 
bool
reflect_filter_rate_limit_check(struct initial_packet_rate_limit *irl);
 
void
reflect_filter_rate_limit_decrease(struct initial_packet_rate_limit *irl);
 
struct initial_packet_rate_limit *
initial_rate_limit_init(int max_per_period, int period_length);
 
void initial_rate_limit_free(struct initial_packet_rate_limit *irl);
#endif /* ifndef REFLECT_FILTER_H */