Completely DROP for UDP packets.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi, I'm trying to dropping all UDP packets from specific address
but it still has higher CPU usages. anyone has ideas for this
issues ? here's example

A   --+--->  F
B   --+
C   --+

A/B/C sending massive UDP packets to F, also it has address dropping
rules fro A/B/C. Yes, it is works fine. But if i see the CPU usages
of 'F' some of cases it is using more than 20-30% when its(A/B/C)
sending 100M to F. is there any best way to decreasing the CPU usage
of the 'F' ? thanks in advance.

Cheers.

P.S :
1. INPUT filter dropping very higher CPU usages
2. TARPIT and prestate PREROUTING dropping less higher but not satisfied.



-
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux