synsanity vs syncookie kernel 4.4 (TCP listener Lockless)

[aderumier]

Hi,

Do you have some benchmark of synsanity vs syncookies with last kernel 4.4.
The new tcp listener lockless implementation should remove previous bottlenecks of syncookie

Developper of the patch announce 6mpps synflood protection
http://marc.info/?l=linux-netdev&m=144431864418007&w=2

[theojulienne]

Hey @aderumier did you by any chance see the blog post on synsanity? In there we mention that on 4.4+ kernels you don't really need synsanity due to the lockless implementation. I haven't yet done any benchmarks on the difference between the two, but I'd love to see some!

[lukastribus]

Well the blog post is rather misleading. It makes it sound like the is an out-of-tree patch for Linux 4.x that achieves this.

That is not true (at least anymore), the fix is in mainline Linux 4.4, not Linux 4.0, and both 4.4 and 4.9 are long-term support kernels.