google / gvisor

Application Kernel for Containers

Home Page:https://gvisor.dev

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Allow configuring ICMP rate limiter mask

brunowonka opened this issue · comments

Description

We currently always apply ICMP rates to ICMP errors, linux allows configuration of those flags through net.ipv4.icmp_ratemask/net.ipv6.icmp.ratemask. We should have the same knobs and apply them uniformly for all outbound ICMP traffic.

Derived from the discovery of rate-limited ICMP Echo traffic in #6519.

A friendly reminder that this issue had no activity for 120 days.