DDoS: Detection and Response
Published May 15, 2012
Version 1.0Was this article helpful?
I'm Joon at F5 Korea, the issue here is that the volume of TCP SYN flooding attack (ACK, FIN, FIN/ACK flooding, etc.) is 10Gbps level.
In case of HTTP GET Flooding, the volume is about 1~3Gbps.
Would you please share what the volume of TCP SYN flooding attack during your test? i'm just curious to compare the CPU % of before vs. after using SYN checking threshold.
Thanks!