Date: Fri, 28 Aug 2015 23:09:22 -0700 (PDT) From: Dmitry Mikhailov <dmitry@pushware.net> To: freebsd-questions@freebsd.org Subject: syncookie CPU load Message-ID: <2142623530.346.1440828562305.JavaMail.zimbra@pushware.net>
next in thread | raw e-mail | index | archive | help
Doing a SYN flood test with FreeBSD on Xeon D (8 core) with syncookies enabled and the CPU load is around 20% (interrupts) at 150K pps. Is there any way reconfigure FreeBSD to bring this load down? Linux has a solution with netfilter synproxy which would not notice this low pps rate so I am wondering whether something similar is possible with FreeBSD? Dmitry
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?2142623530.346.1440828562305.JavaMail.zimbra>