tree 42fa54977a8b413e43d7b03f27ce8a256ad8f109
parent 03aae9637922023dd77955cb15caafb7ce309200
author Alexander Chernavin <achernavin@netgate.com> 1658321022 +0000
committer Fan Zhang <roy.fan.zhang@intel.com> 1659968646 +0000

wireguard: add dos mitigation support

Type: feature

With this change:
 - if the number of received handshake messages exceeds the limit
   calculated based on the peers number, under load state will activate;
 - if being under load a handshake message with a valid mac1 is
   received, but mac2 is invalid, a cookie reply will be sent.

Also, cover these with tests.

Signed-off-by: Alexander Chernavin <achernavin@netgate.com>
Change-Id: I3003570a9cf807cfb0b5145b89a085455c30e717