d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Modified release note: syncache with syncookies.

Browse Source
This commit is contained in:
Bruce A. Mah 2001-12-20 17:42:49 +00:00
parent 9e33f9cfe0
commit 7750015a22
2 changed files with 12 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
release/doc/en_US.ISO8859-1/relnotes/article.sgml
View File

@ -764,8 +764,12 @@ options HZ=1000 # not compulsory but strongly recommended</programlisting>
outstanding, received SYN segments. Incoming SYN segments now
cause entries to be placed in the cache until the TCP three-way
handshake is complete, at which point, memory is allocated for
the connection as usual. This so-called
<quote>syncache</quote> makes a host much more resistant to
the connection as usual. In addition, all TCP Initial Sequence
Numbers (ISNs) are used as cookies, allowing entries in the
cache to be dropped, but still have their corresponding ACKs
accepted later. The combination of the so-called
<quote>syncache</quote> and <quote>syncookies</quote> features
makes a host much more resistant to
TCP-based Denial of Service attacks. Work on this feature was
sponsored by DARPA and NAI Labs. &merged;</para>

8
release/doc/en_US.ISO8859-1/relnotes/common/new.sgml
View File

@ -764,8 +764,12 @@ options HZ=1000 # not compulsory but strongly recommended</programlisting>
outstanding, received SYN segments. Incoming SYN segments now
cause entries to be placed in the cache until the TCP three-way
handshake is complete, at which point, memory is allocated for
the connection as usual. This so-called
<quote>syncache</quote> makes a host much more resistant to
the connection as usual. In addition, all TCP Initial Sequence
Numbers (ISNs) are used as cookies, allowing entries in the
cache to be dropped, but still have their corresponding ACKs
accepted later. The combination of the so-called
<quote>syncache</quote> and <quote>syncookies</quote> features
makes a host much more resistant to
TCP-based Denial of Service attacks. Work on this feature was
sponsored by DARPA and NAI Labs. &merged;</para>