/plushcap/analysis/cloudflare/syn-packet-handling-in-the-wild

SYN packet handling in the wild

What's this blog post about?

This article delves into the complexities of SYN packet handling in Linux and how Cloudflare tackles this issue. It explains that each listening TCP socket has two separate queues: the SYN Queue, which stores incoming SYN packets and handles retries; and the Accept Queue, which contains fully established connections ready to be picked up by an application. The article also discusses queue size limits, perfect backlog values, slow applications, SYN floods, and how Cloudflare mitigates these issues at scale. It concludes with a look at the evolving landscape of Linux SYN packet handling and its future prospects.

Company
Cloudflare

Date published
Jan. 15, 2018

Author(s)
Marek Majkowski

Word count
2035

Language
English

Hacker News points
51


By Matt Makai. 2021-2024.