XDP SYNPROXY ACCELERATION to protect sever from SYN flooding attack

Опубликовано: 10 Февраль 2023
на канале: BPFire
394
9

Demo of using XDP SYNPROXY ACCELERATION to protect server from SYN flooding attack on firewall. Since I am running Ubuntu 20.04 and XDP SYNPROXY requires most recent kernel, so I installed the Ubuntu PPA and uses to select PPA mainline kernel to boot

also resolved the missing SYN/ACK by setting DF (don't fragment flag) in hping3 10.169.72.117 -S -y -p 80 -c 1 since XDP SYNPROXY will XDP_DROP the SYN with DF flag unset