Ddos Prevention - Teltonika RUT955 User Manual

RUT955 User's Manual
7.6.7

DDOS Prevention

The DDOS prevention page allows you to set up protections from various types of DDOS attacks. You will find
information on all of these methods bellow.
7.6.7.1 SYN Flood Protection
SYN Flood Protection allows you to protect yourself from attacks that exploit part of the normal TCP three-way
handshake to consume resources on the targeted server and render it unresponsive. Essentially, with SYN flood DDOS,
the offender sends TCP connection requests faster than the targeted machine can process them, causing network
oversaturation.
Field Name
1. Enable SYN flood protection Enable/Disable
2. SYN flood rate
3. SYN flood burst
4. TCP SYN cookies
Teltonika Solutions
Possible values
Integer numbers
Integer numbers
Enable/Disable
Explanation
Makes router more resistant to SYN flood attacks
Set rate limit (packets per second) for SYN packets above
which the traffic is considered flooded
Set burst limit for SYN packets above which the traffic is
considered flooded if it exceeds the allowed rate
Enable the use of SYN cookies (particular choices of
initial TCP sequence numbers by TCP servers)
98