Re: [PATCH v3 00/30] backport of IP fragmentation fixes

Greg KH
2018-09-17T12:47:52Z

On Thu, Sep 13, 2018 at 07:58:32AM -0700, Stephen Hemminger wrote:
> Took the set of patches from 4.19 to handle IP fragmentation DoS
> and applied them against 4.14.69. Most of these are from Eric.
> In a couple case, it required some manual merge conflict resolution.
>
> Tested normal IP fragmentation with iperf3 and malicious IP fragments
> with fragmentsmack. Under fragmentation attack (700Kpps) the original
> 4.14.69 consumes 97% CPU; with this patch it drops to 5%.

All now queued up, thanks for doing the backport.

greg k-h