lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Message-ID: <201206011248.26748.hans.schillstrom@ericsson.com> Date: Fri, 1 Jun 2012 12:45:16 +0200 From: Hans Schillstrom <hans.schillstrom@...csson.com> To: Eric Dumazet <eric.dumazet@...il.com> CC: netdev <netdev@...r.kernel.org>, Neal Cardwell <ncardwell@...gle.com>, Jesper Dangaard Brouer <brouer@...hat.com>, Tom Herbert <therbert@...gle.com> Subject: Re: [PATCH] tcp: reflect SYN queue_mapping into SYNACK packets On Friday 01 June 2012 12:01:21 Eric Dumazet wrote: > From: Eric Dumazet <edumazet@...gle.com> > > While testing how linux behaves on SYNFLOOD attack on multiqueue device > (ixgbe), I found that SYNACK messages were dropped at Qdisc level > because we send them all on a single queue. > > Obvious choice is to reflect incoming SYN packet @queue_mapping to > SYNACK packet. > > Under stress, my machine could only send 25.000 SYNACK per second (for > 200.000 incoming SYN per second). NIC : ixgbe with 16 rx/tx queues. > > After patch, not a single SYNACK is dropped. > Great, that was just what I was looking for Will try to get this on into test to day. IPv6, do you add that as well ? -- Regards Hans Schillstrom -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
Powered by blists - more mailing lists