syncookied
syncookied copied to clipboard
syn flood protection
For example hosts.yml would look like this: ``` - ip: 1.1.1.1 - srv1: secrets_addr: udp://2.2.2.1:1111 mac: 02:02:02:02:02:01 - srv2: secrets_addr: udp://2.2.2.2:1111 mac: 02:02:02:02:02:02 - srv3: secrets_addr: udp://2.2.2.3:1111 mac: 02:02:02:02:02:03 ```...
libpnet changed its packet structure in 0.10.x branch We should investigate how it affects performance to see if it would be possible to upgrade instead of using our own branch
On version 223f292a288990877a5aba8a79b227a532878db4 and before syncookied was using about 40% cpu under 5Gbps syn flood. Next working version 73e1ac0ce12a2fd24a0d6596c6b16fbd2168b346 (and any newer version) utilizes 100% cpu under same load.
What would be the best way to remove "cookie" and implement pure syn proxy ? If possible - point me in the right direction.
``` /home/travis/.rvm/gems/ruby-2.2.5/gems/octokit-4.3.0/lib/octokit/response/raise_error.rb:16:in `on_complete': GET https://api.github.com/user: 401 - Bad credentials // See: https://developer.github.com/v3 (Octokit::Unauthorized) from /home/travis/.rvm/gems/ruby-2.2.5/gems/faraday-0.9.2/lib/faraday/response.rb:9:in `block in call' from /home/travis/.rvm/gems/ruby-2.2.5/gems/faraday-0.9.2/lib/faraday/response.rb:57:in `on_complete' from /home/travis/.rvm/gems/ruby-2.2.5/gems/faraday-0.9.2/lib/faraday/response.rb:8:in `call' from /home/travis/.rvm/gems/ruby-2.2.5/gems/octokit-4.3.0/lib/octokit/middleware/follow_redirects.rb:73:in `perform_with_redirection' from /home/travis/.rvm/gems/ruby-2.2.5/gems/octokit-4.3.0/lib/octokit/middleware/follow_redirects.rb:61:in `call'...
It would be very handy to have transparent SYNPROXY mode in syncookied This will allow to protect any device without modication in kernel/OS/etc.
Requested features: - Get currently protected IP list - Get firewall rules for IP - Add/remove IP to protected list - Add/remove firewall rule for protected IP - Change default...