syncookie CPU load

Dmitry Mikhailov dmitry at
Sat Aug 29 06:14:41 UTC 2015

Doing a SYN flood test with FreeBSD on Xeon D (8 core) with syncookies enabled and the CPU load is around 20% (interrupts) at 150K pps. Is there any way reconfigure FreeBSD to bring this load down? Linux has a solution with netfilter synproxy which would not notice this low pps rate so I am wondering whether something similar is possible with FreeBSD? 


More information about the freebsd-questions mailing list