Chris Friesen <cfriesen@nortelnetworks.com> [02/02/07 16:04]:
> under our control. It seems to me to be logical to block the sender
> until the congestion goes away, or return with an error code if the
> sender is non-blocking. This may not play nice with the current kernel
> networking code (qdisc and all that) but doesn't it seem like a good
> idea in principle?
If not, it is then possible for a user on a fast machine to hammer the
network interfaces with UDP packets as some sort of denial of service
attack?
Blocking all senders when the qdisc is full and round-robin'ing among
the blocked would prevent this particular attack.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
This archive was generated by hypermail 2b29 : Thu Feb 07 2002 - 21:01:08 EST