Hello everyone,
I have a general question and decided to post it here. Hopefully, I have picked a correct category. The thing I have been trying to figure out is the syn-cache mechanism. I know that it used to be utilized as a method to mitigate the impact of (D)DoS attacks. I would like to know what happened with it? Is it still added to the Linux systems? Perhaps I am missing something, and cannot find the correct man page about it. Is it the thing, that it is only for NetBSD project?

Thank you in advance for your time and help.

Best wishes

You're referring to this?
http://cr.yp.to/syncookies.html

AFAIK, it is still part of linux. There's even a RFC:
http://tools.ietf.org/html/rfc4987

hey zirias, thank you for your answer.
as far as syn cookies goes, I think it has been developed independently of syn cache. Even in the RFC you refer to, there is a solid distinguishment between those two. In the early years of the development of SYN Cookie, I think they have been used simultaneously in order to improve the efficiency of the SYN flood mitigations techniques. In simpler words, as soon as the hash-table of the SYN Cache was about to fill up, the SYN Cookie was triggered. Nowadays, I think there is only SYN Cookie in use,or, I have not come across a relevant reference yet.

If any of you knows where I can find any information about this issue, please let me know. I will be more than grateful for your help.

Thank you one more time for all your resources used up accordingly

Cheers!!!

Yes, I would like this information too!

Ah then I'm sorry, I always thought syn cookies were just the "next step" and replaced syn cache... I didn't know about the technique to use them both together.

Hey,
That's what I thought at the beginning (that SYN Cookies were the improvement). But apparently, SYN Cache was being implemented in the NetBSD project, and in parallel, Linux was being backed up with SYN Cookie. After some time, they worked together. However, the question is - does SYN Cookies mechanism utilize a standard backlog queue? If it does so, then, what happened to SYN Cashe again ?

Cheers!