XDP data-plane armed-only hardening: race-free RATE (X1) + SYN-cookie TX cap (X3) - #196

Merged

vxfemboy merged 6 commits into

mainfrom

sp-xdp-dataplane

Jul 15, 2026

Commits on Jul 15, 2026

fix(xdp): race-free per-source RATE bucket via per-CPU LRU map (X1)
vxfemboy
committed
2b0070a
feat(xdp): global SYN-cookie XDP_TX mint-rate cap (X3 eBPF)
vxfemboy
committed
f39e428
fix(xdp): scale SYN-cookie TX-cap burst to rate_pps; align v6 stat ordering (X3 follow-up)
vxfemboy
committed
930ff61
feat(xdp): syn-cookie-tx-cap config + setter + metric + veth gate (X3)
vxfemboy
committed
9062f1f
fix(xdp): seed TX budget before arming the cookie port gate; document passed/txcapped double-count (X3 hardening)
vxfemboy
committed
47c7bd2
docs: changelog for XDP data-plane armed-only hardening (X1 per-CPU RATE + X3 SYN-cookie TX cap)
vxfemboy
committed
0a3a61f