TCP syn flooding protection

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi, everyone

I'm testing packet flooding test with old kernel version 2.6.30.
My board experienced process starvation when injecting ICMP flood with hping3 tool.
I modified softirq invocation routine to launch ksoftirqd instead of executing do_softirq
and I limitted the speed of ethernet phy to accept below 10Mbps.
It seems that the board can process flooding ICMP packets of 10Mbps,
but the board cannot process against TCP/UDP packet flooding,
the speed of processes become slow down.
IPtabls of which rule is dropping all TCP/UDP packet does not improve the situation.
How can I protect the TCP/UDP flooding in my environment.

Thanks in advance.
Kim





_______________________________________________
Kernelnewbies mailing list
Kernelnewbies@xxxxxxxxxxxxxxxxx
https://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies



[Index of Archives]     [Newbies FAQ]     [Linux Kernel Mentors]     [Linux Kernel Development]     [IETF Annouce]     [Git]     [Networking]     [Security]     [Bugtraq]     [Yosemite]     [MIPS Linux]     [ARM Linux]     [Linux RAID]     [Linux SCSI]     [Linux ACPI]

  Powered by Linux