On Mon, Aug 29, 2022 at 03:15:47PM -0700, Eric Dumazet wrote: > We tried to get rid of any dependence over inetpeer, which is not > resistant against DDOS attacks. > > So I would not add a new dependency. I see your point. What do you suggest doing differently? The inetpeer mechanism is used for IPv4 frags. If it isn't resistant against DDoS attacks, can it perhaps be improved?