> -----Original Message----- > From: Rémi Denis-Courmont [mailto:[email protected]] > Sent: Wednesday, December 02, 2009 2:18 AM > To: Dan Wing > Cc: Stig Venaas; Fred Baker; > [email protected]; > [email protected]; > IETF IPv6 Mailing List; Mohacsi Janos; > [email protected] > Subject: RE: Thoughts on address selection > > > On Tue, 1 Dec 2009 22:19:10 -0800, "Dan Wing" <[email protected]> wrote: > > >> I'm a bit worried about this. If e.g. the host is 100ms > >> (RTT) away and > >> 10 combinations work, you may end up creating TCP state > >> (and getting > >> syn-acks back) on the destination host for 10 connections, > > > Are there servers that don't use SYN-cookies now-a-days? > > IIRC, recent Linux kernel version have SYN-cookies disabled > by default as they were found to make things often worse > rather than better.
I found this citation regarding SYN cookies, which seems to indicate further evolution of both minisock and SYN cookies (to support WINSCALE and SACK) in Linux, http://lwn.net/Articles/277146/ -d -------------------------------------------------------------------- IETF IPv6 working group mailing list [email protected] Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 --------------------------------------------------------------------
