Allocate resources to absorb a low-level SYN attack

SOMAXCONN -> 1024

This sets the per-service maximum backlog permitted

TCP_CONNINIT -> 50

In 500 ms units, this sets the wait time before a half-open connection will be blown away

Previous slide

Next slide

Back to first slide

View graphic version