syncookie CPU load

Dmitry Mikhailov dmitry at pushware.net
Sat Aug 29 06:14:41 UTC 2015


Doing a SYN flood test with FreeBSD on Xeon D (8 core) with syncookies enabled and the CPU load is around 20% (interrupts) at 150K pps. Is there any way reconfigure FreeBSD to bring this load down? Linux has a solution with netfilter synproxy which would not notice this low pps rate so I am wondering whether something similar is possible with FreeBSD? 

Dmitry 


More information about the freebsd-questions mailing list