[Info-vax] Harden TCPIP Srv OVMS again SYN FLOOD attacks

Jan-Erik Söderholm jan-erik.soderholm at telia.com
Tue Aug 14 16:31:29 EDT 2018


Den 2018-08-14 kl. 22:14, skrev Johnny Billquist:
> On 2018-08-14 17:42, Stephen Hoffman wrote:
>> Either in addition to or in place of increasing the sockets — though 
>> pragmatically, there probably aren't all that many good reasons not to 
>> run with 64K sockets configured in this era — I'd suggest having a look 
>> at the tcp_keepinit setting, and specifically at reducing that value. 
> 
> Why the 64K limit? Why not bump it to a few million in that case?
> 
>    Johnny
> 

You cannot (or should not) set it higher according to the docs
or unexpected "things" might happen. It is a built-in limit.

Or did you ask why that limit is where it is? Don't know...



More information about the Info-vax mailing list