netdev
[Top] [All Lists]

Re: Route cache performance under stress

To: ralph+d@xxxxxxxxx
Subject: Re: Route cache performance under stress
From: Florian Weimer <fw@xxxxxxxxxxxxx>
Date: Wed, 11 Jun 2003 21:48:12 +0200
Cc: Jamal Hadi <hadi@xxxxxxxxxxxxxxxx>, Pekka Savola <pekkas@xxxxxxxxxx>, CIT/Paul <xerox@xxxxxxxxxx>, "'Simon Kirby'" <sim@xxxxxxxxxxxxx>, "'David S. Miller'" <davem@xxxxxxxxxx>, "netdev@xxxxxxxxxxx" <netdev@xxxxxxxxxxx>, "linux-net@xxxxxxxxxxxxxxx" <linux-net@xxxxxxxxxxxxxxx>
In-reply-to: <Pine.LNX.4.51.0306101125500.21435@xxxxxxxxxxxx> (Ralph Doncaster's message of "Tue, 10 Jun 2003 11:29:18 -0400 (EDT)")
Mail-followup-to: ralph+d@xxxxxxxxx, Jamal Hadi <hadi@xxxxxxxxxxxxxxxx>, Pekka Savola <pekkas@xxxxxxxxxx>, CIT/Paul <xerox@xxxxxxxxxx>, 'Simon Kirby' <sim@xxxxxxxxxxxxx>, "'David S. Miller'" <davem@xxxxxxxxxx>, "netdev@xxxxxxxxxxx" <netdev@xxxxxxxxxxx>, "linux-net@xxxxxxxxxxxxxxx" <linux-net@xxxxxxxxxxxxxxx>
References: <Pine.LNX.4.44.0306101432530.21247-100000@xxxxxxxxxx> <20030610075702.I37165@xxxxxxxxxxxxxxxx> <Pine.LNX.4.51.0306101125500.21435@xxxxxxxxxxxx>
Sender: netdev-bounce@xxxxxxxxxxx
User-agent: Gnus/5.1001 (Gnus v5.10.1) Emacs/21.3 (gnu/linux)
Ralph Doncaster <ralph@xxxxxxxxx> writes:

>> Assuming the attacker has a 100mbps link to you, yes ;->
>
> A script kiddie 0wning a box with a FE connection is nothing.  During what
> was probably the worst DOS I got hit with, one of my upstream providers
> said they were seeing about 600mbps of traffic related to the attack.

Yes, these numbers keep growing.  By today's standards, 6000 Mbps
shouldn't be too surprising. 8-(

One of the servers I keep running was recently flooded with 1500-byte
UDP packets, Fast Ethernet line rate.  It definitely happens if your
pipes are fat enough.

<Prev in Thread] Current Thread [Next in Thread>