loki5512344 d6bcae54c8 fix(xdp): two RST-challenge bugs found by live kernel testing ... Found on real kernel 5.15 (netns+veth, challenge enabled): 1. truncated IP: after bpf_xdp_adjust_tail the IPv4 tot_len / IPv6 payload_len still claimed the original SYN size — peer silently dropped the malformed SYN-ACK, challenge never seen 2. endianness: marker/bad_ack written as raw host-order halfwords into network-order tcpw[] — client echoed swap16halves(bad_ack) in its RST.seq, verification always failed (CHAL_FAILED == CHAL_SENT) Post-fix e2e: SYN -> bad-ACK SYN-ACK (XDP_TX) -> client RST -> verified -> retry connects transparently; counters SENT=1 VERIFIED=1 FAILED=0		2026-08-24 13:06:10 +02:00
..
common.h	feat!: universal redesign — drop Minecraft stack, single-crate architecture	2026-08-24 01:50:22 +02:00
config.h	fix: universal default protected port range (was Minecraft 25565-25570)	2026-08-24 11:18:57 +02:00
maps.h	feat: traffic intel hot path, SYN RST-challenge, XDP environment diagnostics	2026-08-24 10:11:10 +02:00
prefix_stats.h	feat: subnet-level attack detection (prefix_stats)	2026-08-24 09:47:21 +02:00
stats.h	feat: traffic intel hot path, SYN RST-challenge, XDP environment diagnostics	2026-08-24 10:11:10 +02:00
syn_challenge.h	fix(xdp): two RST-challenge bugs found by live kernel testing	2026-08-24 13:06:10 +02:00
universal_filter.c	feat: traffic intel hot path, SYN RST-challenge, XDP environment diagnostics	2026-08-24 10:11:10 +02:00