XDP SYNPROXY ACCELERATION to protect sever from SYN flooding attack

Опубликовано: 21 Март 2025
на канале: BPFire
549
11

Demo of using XDP SYNPROXY ACCELERATION to protect server from SYN flooding attack on firewall. Since I am running Ubuntu 20.04 and XDP SYNPROXY requires most recent kernel, so I installed the Ubuntu PPA and uses https://github.com/vincentmli/docs/bl... to select PPA mainline kernel to boot

also resolved the missing SYN/ACK by setting DF (don't fragment flag) in hping3 10.169.72.117 -S -y -p 80 -c 1 since XDP SYNPROXY will XDP_DROP the SYN with DF flag unset