{"action":"created","issue":{"url":"https://api.github.com/repos/openbmc/openbmc/issues/504","repository_url":"https://api.github.com/repos/openbmc/openbmc","labels_url":"https://api.github.com/repos/openbmc/openbmc/issues/504/labels{/name}","comments_url":"https://api.github.com/repos/openbmc/openbmc/issues/504/comments","events_url":"https://api.github.com/repos/openbmc/openbmc/issues/504/events","html_url":"https://github.com/openbmc/openbmc/issues/504","id":169993999,"number":504,"title":"Should enable CONFIG_SYN_COOKIES on ARM kernels?","user":{"login":"williamspatrick","id":105009,"avatar_url":"https://avatars.githubusercontent.com/u/105009?v=3","gravatar_id":"","url":"https://api.github.com/users/williamspatrick","html_url":"https://github.com/williamspatrick","followers_url":"https://api.github.com/users/williamspatrick/followers","following_url":"https://api.github.com/users/williamspatrick/following{/other_user}","gists_url":"https://api.github.com/users/williamspatrick/gists{/gist_id}","starred_url":"https://api.github.com/users/williamspatrick/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/williamspatrick/subscriptions","organizations_url":"https://api.github.com/users/williamspatrick/orgs","repos_url":"https://api.github.com/users/williamspatrick/repos","events_url":"https://api.github.com/users/williamspatrick/events{/privacy}","received_events_url":"https://api.github.com/users/williamspatrick/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":{"login":"shenki","id":207355,"avatar_url":"https://avatars.githubusercontent.com/u/207355?v=3","gravatar_id":"","url":"https://api.github.com/users/shenki","html_url":"https://github.com/shenki","followers_url":"https://api.github.com/users/shenki/followers","following_url":"https://api.github.com/users/shenki/following{/other_user}","gists_url":"https://api.github.com/users/shenki/gists{/gist_id}","starred_url":"https://api.github.com/users/shenki/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/shenki/subscriptions","organizations_url":"https://api.github.com/users/shenki/orgs","repos_url":"https://api.github.com/users/shenki/repos","events_url":"https://api.github.com/users/shenki/events{/privacy}","received_events_url":"https://api.github.com/users/shenki/received_events","type":"User","site_admin":false},"assignees":[{"login":"shenki","id":207355,"avatar_url":"https://avatars.githubusercontent.com/u/207355?v=3","gravatar_id":"","url":"https://api.github.com/users/shenki","html_url":"https://github.com/shenki","followers_url":"https://api.github.com/users/shenki/followers","following_url":"https://api.github.com/users/shenki/following{/other_user}","gists_url":"https://api.github.com/users/shenki/gists{/gist_id}","starred_url":"https://api.github.com/users/shenki/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/shenki/subscriptions","organizations_url":"https://api.github.com/users/shenki/orgs","repos_url":"https://api.github.com/users/shenki/repos","events_url":"https://api.github.com/users/shenki/events{/privacy}","received_events_url":"https://api.github.com/users/shenki/received_events","type":"User","site_admin":false}],"milestone":{"url":"https://api.github.com/repos/openbmc/openbmc/milestones/2","html_url":"https://github.com/openbmc/openbmc/milestones/openBMC%20v2.0%20Backlog","labels_url":"https://api.github.com/repos/openbmc/openbmc/milestones/2/labels","id":1678661,"number":2,"title":"openBMC v2.0 Backlog","description":"Backlog for v2.0.","creator":{"login":"williamspatrick","id":105009,"avatar_url":"https://avatars.githubusercontent.com/u/105009?v=3","gravatar_id":"","url":"https://api.github.com/users/williamspatrick","html_url":"https://github.com/williamspatrick","followers_url":"https://api.github.com/users/williamspatrick/followers","following_url":"https://api.github.com/users/williamspatrick/following{/other_user}","gists_url":"https://api.github.com/users/williamspatrick/gists{/gist_id}","starred_url":"https://api.github.com/users/williamspatrick/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/williamspatrick/subscriptions","organizations_url":"https://api.github.com/users/williamspatrick/orgs","repos_url":"https://api.github.com/users/williamspatrick/repos","events_url":"https://api.github.com/users/williamspatrick/events{/privacy}","received_events_url":"https://api.github.com/users/williamspatrick/received_events","type":"User","site_admin":false},"open_issues":138,"closed_issues":31,"state":"open","created_at":"2016-04-01T19:04:51Z","updated_at":"2016-08-08T21:37:04Z","due_on":"2017-01-01T06:00:00Z","closed_at":null},"comments":1,"created_at":"2016-08-08T18:38:30Z","updated_at":"2016-08-09T00:39:16Z","closed_at":null,"body":"See openbmc/phosphor-rest-server#24 for full context.\r\n\r\n@shenki - We are still investigating overall, but do you think we should CONFIG_SYN_COOKIES=y in the kernels?"},"comment":{"url":"https://api.github.com/repos/openbmc/openbmc/issues/comments/238420256","html_url":"https://github.com/openbmc/openbmc/issues/504#issuecomment-238420256","issue_url":"https://api.github.com/repos/openbmc/openbmc/issues/504","id":238420256,"user":{"login":"amboar","id":526481,"avatar_url":"https://avatars.githubusercontent.com/u/526481?v=3","gravatar_id":"","url":"https://api.github.com/users/amboar","html_url":"https://github.com/amboar","followers_url":"https://api.github.com/users/amboar/followers","following_url":"https://api.github.com/users/amboar/following{/other_user}","gists_url":"https://api.github.com/users/amboar/gists{/gist_id}","starred_url":"https://api.github.com/users/amboar/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/amboar/subscriptions","organizations_url":"https://api.github.com/users/amboar/orgs","repos_url":"https://api.github.com/users/amboar/repos","events_url":"https://api.github.com/users/amboar/events{/privacy}","received_events_url":"https://api.github.com/users/amboar/received_events","type":"User","site_admin":false},"created_at":"2016-08-09T00:39:16Z","updated_at":"2016-08-09T00:39:16Z","body":"Here is an interesting drawback to syn cookies:\r\n\r\n> A problem arises when the connection-finalizing ACK packet sent by the client is lost, and the application layer protocol requires the server to speak first (SMTP and SSH are two examples). In this case, the client assumes that the connection was established successfully and waits for the server to send its protocol banner, or resend the SYN+ACK packet; however, the server is not aware of the session and will not resend the SYN+ACK because it discarded the backlog queue entry that would enable it to do so. Eventually, the client will abort the connection due to an application layer timeout, but this may take a relatively long time.\r\n\r\nSSH would be the main concern.\r\n\r\nhttps://en.wikipedia.org/wiki/SYN_cookies#Drawbacks"}}
{"actor":{"display_login":"amboar"}}