From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-pb0-x22d.google.com (mail-pb0-x22d.google.com [IPv6:2607:f8b0:400e:c01::22d]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority" (verified OK)) by huchra.bufferbloat.net (Postfix) with ESMTPS id 1F86D21F1C1 for ; Fri, 12 Jul 2013 10:47:03 -0700 (PDT) Received: by mail-pb0-f45.google.com with SMTP id mc8so9248252pbc.32 for ; Fri, 12 Jul 2013 10:47:02 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:subject:from:to:cc:date:in-reply-to:references :content-type:x-mailer:content-transfer-encoding:mime-version; bh=tIXm9GuNK/X5GPRL3i7IXXz9MVzXjB1vx5rKCqJM6j0=; b=pRM4+MAaVbypNSnHBRMUP+e2KJm+ZyM7xHSZC/T4TmnxqW2kDmM3s0uVeWNs2zkn/m 9pOoFq9RA13VxJUGmUccauhhvdEk2Z4VLN0/c3OWImFvfAVZKeCewY/NtKg0zeclGJj4 uuAviKA8nTxRpN5Z7XCHEq6jYwwovDZRxsamHvF0vKwDHmf2UigN5woOQdEHIP+la1L5 xp5lkI7Cp9IXDtJ8rFox1uPlZMGTXqti6IRw/G/FdITm99o5dxuqRgBVX4xjCUB7XkkN XfY0/CaY4qYWe3q/GYE2VpfRwa63S+2Bk1wRnct+CD7ciH65Sa8AqEqLQbH7Jw0H5zDG Cn+w== X-Received: by 10.68.247.226 with SMTP id yh2mr42348356pbc.164.1373651222634; Fri, 12 Jul 2013 10:47:02 -0700 (PDT) Received: from ?IPv6:2620:0:1000:3304:2f:cc3b:ee84:65d9? ([2620:0:1000:3304:2f:cc3b:ee84:65d9]) by mx.google.com with ESMTPSA id xl3sm46482523pbb.17.2013.07.12.10.47.01 for (version=SSLv3 cipher=RC4-SHA bits=128/128); Fri, 12 Jul 2013 10:47:02 -0700 (PDT) Message-ID: <1373651221.10804.37.camel@edumazet-glaptop> From: Eric Dumazet To: Dave Taht Date: Fri, 12 Jul 2013 10:47:01 -0700 In-Reply-To: References: <1373564673.4600.55.camel@edumazet-glaptop> <1373568848.4600.66.camel@edumazet-glaptop> <20130712113413.4b601800@redhat.com> <1373642001.10804.18.camel@edumazet-glaptop> <1373647842.10804.28.camel@edumazet-glaptop> <1373649589.10804.34.camel@edumazet-glaptop> Content-Type: text/plain; charset="UTF-8" X-Mailer: Evolution 3.2.3-0ubuntu6 Content-Transfer-Encoding: 7bit Mime-Version: 1.0 Cc: codel@lists.bufferbloat.net, Jesper Dangaard Brouer Subject: Re: [Codel] hardware multiqueue in fq_codel? X-BeenThere: codel@lists.bufferbloat.net X-Mailman-Version: 2.1.13 Precedence: list List-Id: CoDel AQM discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Jul 2013 17:47:03 -0000 On Fri, 2013-07-12 at 13:35 -0400, Dave Taht wrote: > Against a syn flood attack? Yes. SYNACK messages are in the band 1. SYNACK messages might be dropped, but your precious management traffic will not. > > > Thats the point you absolutely missed. Its kind of incredible. > > I guess I'm still entirely missing it. By default the networks I have > are protected by the syn_flood mechanism as enabled in openwrt. Most servers coping with synflood or any kind of traffic flood do not use openwrt ;)