]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
Merge branch 'icmp-better-deal-with-ddos'
authorJakub Kicinski <kuba@kernel.org>
Thu, 19 Feb 2026 00:46:38 +0000 (16:46 -0800)
committerJakub Kicinski <kuba@kernel.org>
Thu, 19 Feb 2026 00:46:38 +0000 (16:46 -0800)
commitb1216f1d667be672d1594e59c8c94b7669519711
tree09e7f57da5b7dff3303ebaa33babb4baff8a2efe
parent570e4549f63293ca4973ef367ff02554f3e3dfc2
parent9395b1bb1f14ae3fa1e4e2f7988f029cb1c009ed
Merge branch 'icmp-better-deal-with-ddos'

Eric Dumazet says:

====================
icmp: better deal with DDOS

When dealing with death of big UDP servers, admins might want to
increase net.ipv4.icmp_msgs_per_sec and net.ipv4.icmp_msgs_burst
to big values (2,000,000 or more).

They also might need to tune the per-host ratelimit to 1ms or 0ms
in favor of the global rate limit.

This series fixes bugs showing up in all these needs.
====================

Link: https://patch.msgid.link/20260216142832.3834174-1-edumazet@google.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>