Re: [44net] SYN Flood, etc.

So not sure if your concern is primarily about the SYN flood or something else, but the system tuning in SYN cookies is a great thing. Essentially it's a challenge-response for the users to do the heavy lifting before the host goes through the motions to set up a TCP flow and consume resources. Essentially this limits the 3WS to completing only for valid connections. Said another way, unless you see tons of Syns coming in and consuming CPU to generate the SYN cookies, you're probably fine. Andrew