3 ms·
Block icmp don't even fix the cpu issue though, the router still use cpu to decide which packet should be blocked. If you really care about the cpu usage, you
by mmis1000 1y ago
Block icmp don't even fix the cpu issue though, the router still use cpu to decide which packet should be blocked.
If you really care about the cpu usage, you should drop raw traffic instead (when dos from certain ip is detected)
- paffdragon 1y agoIndeed. What I meant was that it's cheaper to drop than to generate a reply. But you are right, and I also mentioned in the other reply, that my router wouldn't stand a chance dropping or replying to a DDoS anyway, so probably this concern is not relevant in the home router context.
- sidewndr46 1y agoIt's probably just a result of my incredibly slow home internet, but the CPU part was never an aspect for me. It's primarily related to the wasted bandwidth on the outbound side by sending a reply