Re: Enable syn cookies by default

Previous thread: [PATCH 0/4 v2] net: Implement fast TX queue selection by Krishna Kumar on Friday, October 16, 2009 - 12:21 am. (11 messages)

Next thread: Congratulations! by btobacco2 on Friday, October 16, 2009 - 2:13 am. (1 message)
From: Jarek Poplawski
Date: Friday, October 16, 2009 - 1:55 am

Hi,

Alas, I can only give you a hint: while waiting for a better response,
you could try to 'google' for some archives of this list; AFAICR a few
(?) months ago David Miller explained this first question at least.
(In short: they aren't up-to-date enough.)

Regards,

--

From: Jarek Poplawski
Date: Friday, October 16, 2009 - 12:01 pm

It looks like my memory is exact only about dates ("?"! ;-). There was
mainly David's opinion and some more in the thread (shared with lkml).
Here is a link:
http://lkml.indiana.edu/hypermail/linux/kernel/0807.3/0050.html

Jarek P.
--

From: Florian Westphal
Date: Friday, October 16, 2009 - 12:56 pm

Hrm, strange.

The syncookie sysctl only has an effect on tcp options
once a listening sockets' syn queue is full. And even if you lose all
the tcp options -- without tcp_syncookies=1, the connection request
would have been discarded. So I do not really understand why they
shouldn't default to 1. I've sent patches for both points raised
(no warning about syn queue overflow if cookies are disabled,
 syncookies sysctl defaults to 0), lets see what happens :-)

--

Previous thread: [PATCH 0/4 v2] net: Implement fast TX queue selection by Krishna Kumar on Friday, October 16, 2009 - 12:21 am. (11 messages)

Next thread: Congratulations! by btobacco2 on Friday, October 16, 2009 - 2:13 am. (1 message)