Allow withholding the SYN|ACK packet by user code

src/socket/tcp.rs

@@ -461,6 +461,9 @@ pub struct Socket<'a> {
     /// Used for rate-limiting: No more challenge ACKs will be sent until this instant.
     challenge_ack_timer: Instant,
 
+    /// If this is set, we will not send a SYN|ACK until this is unset.
+    synack_paused: bool,
+
     /// Nagle's Algorithm enabled.
     nagle: bool,
 
@@ -522,6 +525,7 @@ impl<'a> Socket<'a> {
             ack_delay_timer: AckDelayTimer::Idle,
             challenge_ack_timer: Instant::from_secs(0),
             nagle: true,
+            synack_paused: false,
 
             #[cfg(feature = "async")]
             rx_waker: WakerRegistration::new(),
@@ -586,6 +590,15 @@ impl<'a> Socket<'a> {
         self.nagle
     }
 
+    /// Pause sending of SYN|ACK packets.
+    ///
+    /// When this flag is set, the socket will get stuck in `SynReceived` state without sending
+    /// any SYN|ACK packets back, until this flag is unset. This is useful for certain niche TCP
+    /// proxy usecases.
+    pub fn pause_synack(&mut self, pause: bool) {
+        self.synack_paused = pause;
+    }
+
     /// Return the current window field value, including scaling according to RFC 1323.
     ///
     /// Used in internal calculations as well as packet generation.
@@ -2098,6 +2111,10 @@ impl<'a> Socket<'a> {
             }
         }
 
+        if matches!(self.state, State::SynReceived) && self.synack_paused {
+            return Ok(());
+        }
+
         // Decide whether we're sending a packet.
         if self.seq_to_transmit(cx) {
             // If we have data to transmit and it fits into partner's window, do it.