3 ms·
Don't forget, Windows 10 abuses TCP link sharing by opening over 100 simultaneous TCP connections to download updates, bringing your entire home network to a gr
by colanderman 10y ago
Don't forget, Windows 10 abuses TCP link sharing by opening over 100 simultaneous TCP connections to download updates, bringing your entire home network to a grinding halt until it's finished.
Side note to those with a Mikrotik router, you can protect your network from the malware that is Windows Update with the following firewall rules:
/ip firewall filter add action=drop chain=forward connection-limit=9,12 \
in-interface=ether1-gateway protocol=tcp src-port=80 tcp-flags=syn,ack
/ipv6 firewall filter add action=drop chain=forward connection-limit=9,32 \
in-interface=ether1-gateway protocol=tcp src-port=80 tcp-flags=syn,ack
placed before the rule to accept established connections. These rules are maybe a little overzealous, but they were the only way I've found to make my network usable when Windows Update launches a DoS attack.
- james4k 10y agoIs this for real? Been wondering why my home network's been having intermittent issues. Damn. Edit: Can't seem to find any confirmation after some searching. Are you sure this is what happens? Finding this hard to believe, even for Windows 10.
- colanderman 10y agoYep. Other people have seen the same thing. Previous discussion on HN: https://news.ycombinator.com/item?id=11851529 https://news.ycombinator.com/item?id=11851529 The first post in the article describes the exact symptoms I see. I see the connections only when my wife's computer is on (but not always, maybe once a week), and when they occur, there's a Windows system process churning away on it. Connections are always to Akamai servers (confirmed with whois) on port 80, both v4 and v6 (I have native v6 via Comcast). Didn't occur until she upgraded to Windows 10 a couple months ago (she was on 8 before). To be fair, this might really be an Akamai thing, with MS just using their client blindly. But neither OS X nor Linux nor Windows 8 does this to my network, so I think it's fair to blame MS for this.
- colanderman 10y agoAnd a Reddit thread on Wednesday's onslaught: https://www.reddit.com/r/networking/comments/4sqf8k/any_one_else_getting_hammered_by_lime_light/ https://www.reddit.com/r/networking/comments/4sqf8k/any_one_...