netdev - Re: [PATCH net-next 0/4] tcp: better smp listener behavior

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <1444402156.27760.62.camel@edumazet-glaptop2.roam.corp.google.com>
Date:	Fri, 09 Oct 2015 07:49:16 -0700
From:	Eric Dumazet <eric.dumazet@...il.com>
To:	Tom Herbert <tom@...bertland.com>
Cc:	Eric Dumazet <edumazet@...gle.com>,
	"David S . Miller" <davem@...emloft.net>,
	netdev <netdev@...r.kernel.org>,
	Daniel Borkmann <daniel@...earbox.net>,
	Tobias Klauser <tklauser@...tanz.ch>
Subject: Re: [PATCH net-next 0/4] tcp: better smp listener behavior

On Fri, 2015-10-09 at 07:29 -0700, Eric Dumazet wrote:

> So the answer is : about 800,000 SYN per second in IPV6 with purely DDOS attack

My IPv6 routing setup was a bit silly ;)

With a slightly better one, we reach 3.8 Mpps and kernel profile looks
like :

    21.22%  [kernel]  [k] ip6_pol_route.isra.47      
    11.42%  [kernel]  [k] _raw_read_lock_bh          
     9.83%  [kernel]  [k] fib6_lookup                
     8.96%  [kernel]  [k] _raw_read_unlock_bh        
     8.47%  [kernel]  [k] fib6_get_table             
     4.01%  [kernel]  [k] __inet6_lookup_established 
     2.94%  [kernel]  [k] memcpy_erms                
     2.36%  [kernel]  [k] dst_release                


--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html