3 ms·
Aren't SYN-cookies [0] the traditional defence against SYN floods? The proxy, or a device in front of it, could take care of that. Only connections that complet
by swalberg 14y ago
Aren't SYN-cookies [0] the traditional defence against SYN floods? The proxy, or a device in front of it, could take care of that. Only connections that complete the 3 way handshake would take up any room in the connection table.
0 - http://tools.ietf.org/html/rfc4987 http://tools.ietf.org/html/rfc4987
- blibble 14y agoit's just the sheer amount of packets hitting our network that cause the issue, not what is inside them!
- Dylan16807 14y agoI don't understand. Why is it simple to filter UDP but not simple to filter based on a cookie? Is the validation cpu-expensive in bulk? Do you not have the capability to filter that way at the boundary?