Re: (failed) ddos attack against my lvs cluster

[Jacob Coby <jcoby@xxxxxxxxxxxxxxx>]

Jacob Coby wrote:
> You can try turning on tcp_syncookies:
>
> echo 1 > /proc/sys/net/ipv4/tcp_syncookies
>
> http://www.mail-archive.com/focus-linux@xxxxxxxxxxxxxxxxx/msg00185.html
I forgot to mention that I've had tcp_syncookies enabled on individual 
systems for about 3 years now with no problems.  I've had it enabled on 
every machine in a LVS-DR cluster for 6 months with no problems.
The email I quoted just said everything I wanted to say.

-Jacob