CONFIG_NFT_SYNPROXY: Netfilter nf_tables SYNPROXY expression support

General informations

The Linux kernel configuration item CONFIG_NFT_SYNPROXY:

• prompt: Netfilter nf_tables SYNPROXY expression support
• type: tristate
• depends on: CONFIG_NF_CONNTRACK && CONFIG_NETFILTER_ADVANCED
• defined in net/netfilter/Kconfig
• found in Linux kernels: 5.3–5.19, 6.0–6.8, 6.9-rc+HEAD
• modules built: nft_synproxy

Help text

The SYNPROXY expression allows you to intercept TCP connections and establish them using syncookies before they are passed on to the server. This allows to avoid conntrack and server resource usage during SYN-flood attacks.

Hardware

LKDDb

Raw data from LKDDb:

• lkddb module nft_synproxy CONFIG_NFT_SYNPROXY : net/netfilter/Kconfig : "Netfilter nf_tables SYNPROXY expression support" # in 5.3–5.19, 6.0–6.8, 6.9-rc+HEAD

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: