tech-net archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: Regarding summer of code 2008(writing device drivers)



>>> I don't see why there's any more chance of [data injection] with
>>> this scheme than with normal TCP.
>> Sleeper injections, perhaps?
> I still don't see the attack.  The packet can only get into the cache
> if it's in-window for some stream, plus it passes the TCP checksum.

Oh, I misunderstood.  I thought this was done at the IP layer, not the
TCP layer.

> (Aside: we never want to cache UDP packets without checksum.  [...])

If you're doing caching at the TCP layer, you don't have to worry about
non-TCP packets.

> [...], especially when you take the probability of reuse into
> account.  (Hmm -- for NFS, it might be a very promising idea...)

Doesn't most NFS use UDP, and thus not get cached?  I certainly know
that I've seen NFS-over-TCP used seldom-to-never.

/~\ The ASCII                           der Mouse
\ / Ribbon Campaign
 X  Against HTML               mouse%rodents.montreal.qc.ca@localhost
/ \ Email!           7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B


Home | Main Index | Thread Index | Old Index