ANK> Forget about DoSes, Andi. Tune _normal_ case at least, it is handled
ANK> pathologically now as well.
I have been meaning to send you a patch for random drop action on metering
but i will clean it up first.
You can imitate RED with Ingress policing + random drop metering + the
FIFO req queue. eg
if SYN meter exceeds threshold1 but not threshold2 random drop
else
if SYN meter exceeds threshold2 always drop
Threshold1 and 2 map to min/maxth RED parameters.
and of course your threshold values would be nicely mapped to your
req queue capacity.
cheers,
jamal
-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to [EMAIL PROTECTED]
