Re: DoS/DDoS protection for end nodes

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Subject: Re: DoS/DDoS protection for end nodes
From: "William N." <netfilter@xxxxxxxxxx>
Date: Thu, 18 Apr 2024 16:31:44 -0000
In-reply-to: <7370616d-29a7cdb4-057f-4e56-a950-010bdd25c347-at.encryp.ch-74726170@at.encryp.ch>
References: <20240417194340.20430839@localhost> <7370616d-fa0a35c7-09c3-4db9-9b8c-03b944b73124-at.encryp.ch-74726170@at.encryp.ch> <20240418121340.58c1fa6e@localhost> <07f45d43-0ab0-42bf-87e2-9c8ce00bcdb6@linutronix.de> <20240418153254.65058b50@localhost> <7370616d-29a7cdb4-057f-4e56-a950-010bdd25c347-at.encryp.ch-74726170@at.encryp.ch>
Reply-to: netfilter@xxxxxxxxxxxxxxx

On Thu, 18 Apr 2024 16:16:20 +0000 (UTC) Serhii wrote:

> No, nftables hooks are running too late to have similar performance
> as XDP/eBPF offers.

In that case, XDP (and hence C coding) is still necessary, right?

References:
- DoS/DDoS protection for end nodes
  - From: William N.
- Re: DoS/DDoS protection for end nodes
  - From: Serg
- Re: DoS/DDoS protection for end nodes
  - From: William N.
- Re: DoS/DDoS protection for end nodes
  - From: Florian Kauer
- Re: DoS/DDoS protection for end nodes
  - From: William N.
- Re: DoS/DDoS protection for end nodes
  - From: Serhii

Prev by Date: Re: DoS/DDoS protection for end nodes
Next by Date: Re: Combining/compacting 2 rules into 1
Previous by thread: Re: DoS/DDoS protection for end nodes
Next by thread: Re: DoS/DDoS protection for end nodes
Index(es):
- Date
- Thread

[Index of Archives] [Linux Netfilter Development] [Linux Kernel Networking Development] [Netem] [Berkeley Packet Filter] [Linux Kernel Development] [Advanced Routing & Traffice Control] [Bugtraq]

Powered by Linux