ANK> Forget about DoSes, Andi. Tune _normal_ case at least, it is handled
ANK> pathologically now as well.

I have been meaning to send you a patch for random drop action on metering
but i will clean it up first.
You can imitate RED with Ingress policing + random drop metering + the
FIFO req queue. eg

if SYN meter exceeds threshold1 but not threshold2 random drop
        else  
                if SYN meter exceeds threshold2 always drop

Threshold1 and 2 map to min/maxth RED parameters.

and of course your threshold values would be nicely mapped to your 
req queue capacity.

cheers,
jamal

                        


-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to [EMAIL PROTECTED]

Reply via email to