From 90eea3b411975a90ad45261011ecf3f2bf752743 Mon Sep 17 00:00:00 2001 From: Guillaume Roguez <guillaume.roguez@savoirfairelinux.com> Date: Wed, 20 Apr 2016 11:12:10 -0400 Subject: [PATCH] dtls: increase handshake retry delay Increase DTLS retransmit timeout from 250ms to 1000ms. This may help in case of network congestion to not increase the problem. Change-Id: I5ffedc91b5fac594b9a36384c6e3cc89f20c7c0d Tuleap: #572 --- src/security/tls_session.cpp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/security/tls_session.cpp b/src/security/tls_session.cpp index fc65fa4833..2fbc50d6a1 100644 --- a/src/security/tls_session.cpp +++ b/src/security/tls_session.cpp @@ -44,7 +44,7 @@ static constexpr int DTLS_MTU {1400}; // limit for networks like ADSL static constexpr std::size_t INPUT_MAX_SIZE {1000}; // Maximum packet to store before dropping (pkt size = DTLS_MTU) static constexpr ssize_t FLOOD_THRESHOLD {4*1024}; static constexpr auto FLOOD_PAUSE = std::chrono::milliseconds(100); // Time to wait after an invalid cookie packet (anti flood attack) -static constexpr auto DTLS_RETRANSMIT_TIMEOUT = std::chrono::milliseconds(250); // Delay between two handshake request on DTLS +static constexpr auto DTLS_RETRANSMIT_TIMEOUT = std::chrono::milliseconds(1000); // Delay between two handshake request on DTLS static constexpr auto COOKIE_TIMEOUT = std::chrono::seconds(10); // Time to wait for a cookie packet from client // Helper to cast any duration into an integer number of milliseconds -- GitLab