Reducing select() usage under load

Arnt Gulbrandsen arnt at gulbrandsen.priv.no
Tue May 16 18:13:52 UTC 2006


David Nicol writes:
> Is a flood even realistic, given expected CPU speed and pipe widths? 
> It seems that the bottleneck would get hit on bandwidth before 
> starvation effects happen. Could a flooding attack really fill the 
> packet queue faster than than the code can drain it?

Someone mentioned 49kpps a few days ago. That's maybe 50Mbps, right? 
It's trivial to find a cheapish server with 1-2 gigabit NICs, and 
almost as easy to find a colo with enough bandwidth that a determined 
attacker can shove 100-200Mbps at you.

Arnt



More information about the nsd-users mailing list