CONFIG_NET_FLOW_LIMIT (not configurable)
configname: CONFIG_NET_FLOW_LIMIT
Linux Kernel Configuration
└─>Networking support
└─>Networking options
└─>NET_FLOW_LIMIT
In linux kernel since version 3.10 (release Date: 2013-06-30)
The network stack has to drop packets when a receive processing CPU's
backlog reaches netdev_max_backlog. If a few out of many active flows
generate the vast majority of load, drop their traffic earlier to
maintain capacity for the other flows. This feature provides servers
with many clients some protection against DoS by a single (spoofed)
flow that greatly exceeds average workload.
backlog reaches netdev_max_backlog. If a few out of many active flows
generate the vast majority of load, drop their traffic earlier to
maintain capacity for the other flows. This feature provides servers
with many clients some protection against DoS by a single (spoofed)
flow that greatly exceeds average workload.