On Sat, Nov 09, 2019 at 01:30:32PM +0100, Markus Wernig wrote: > Hm, also no replies to that one :-) > > On 11/6/19 8:15 PM, Markus Wernig wrote: > > > So just to make sure: Is anybody using syncookies and/or synproxy in > > production in a similar setup? > > So nobody is using syncookies/synproxy at all?
I guess that is a reasonably safe assumption. syncookies are rather new and probably need more battle testing. synproxy never helped me much in case of a SYN attack since it will cause pf(4) to hit the state limit no matter what you do and then stuff starts to break. -- :wq Claudio
