lkml.org 
[lkml]   [2000]   [Sep]   [7]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: linux kernel TCP, network connections and iptables
Date
Hello!

> I believe that the DoS is that the path through the kernel turns out to be
> long and that a lot of these packets will bring a machine to its knees.

It is not longer than path for any other kind of packet.
In the reported case it is much shorter. 8)

Apparently, you try to remind about that silly pseudo-attack
against some kind of BSD? 8) First, it was different, because
flood was made for port, which was listened. The path is really
longer there, but the difference is ridiculuous.


Second, machines _are_ killed with high pps rates, no doubts.
But it has nothing to do either with TCP or with special packet pattern.
And any kind of policing is useless to fight this. Just do not attach
slow machines to fast but LANs, if you are afraid of local pps floods.

Alexey
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 12:38    [W:0.088 / U:3.476 seconds]
©2003-2018 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site