Table of Contents
Advertisement
JunosE 11.3.x IP, IPv6, and IGP Configuration Guide
tcp resequence-buffers global-maximum
tcp resequence-buffers default-vr-maximum
tcp resequence-buffers vr-maximum
52
packet that contains only one data byte might consume many data bytes of buffer space,
but only one byte of TCP space.
Under these conditions, an attacker can send a large number of 1-byte packets to an
E Series router in which each packet is buffered, consuming an entire packet buffer and
eventually consuming a large amount of resources.
To defend against this sort of attack, you can set defaults and limits on the number of
outstanding buffers on reordering queues. You can configure these defaults and limits
on a per-router, per-virtual router, or per-connection basis.
Limiting Buffers per Router
The tcp resequence-buffers global-maximum command enables you to limit the number
of outstanding buffers on the entire router.
Use to specify a router-wide maximum number of buffers that resequencing queues
can contain.
Specify a value of zero (0) to turn off the limit.
Example
host1(config)#tcp resequence-buffers global-maximum
Use the no version to revert the global maximum buffer value to its default, 1000
buffers.
See tcp resequence-buffers global-maximum
Limiting Buffers per Virtual Router
The tcp resequence-buffers default-vr-maximum command and tcp
resequence-buffers vr-maximum command enable you to limit the number of
outstanding buffers on existing or newly established virtual routers.
Use to specify the default buffer limit assigned to all virtual routers when the virtual
router is established.
Specify a value of zero (0) to turn off the limit assignment.
Example
host1(config)#tcp resequence-buffers default-vr-maximum 200
Use the no version to revert the virtual router maximum value to its default, 100 buffers.
See tcp resequence-buffers default-vr-maximum
Use to define the maximum number of buffers that the current or specified virtual
router can use.
Specify a value of zero (0) to turn off the limit assignment.
Copyright © 2010, Juniper Networks, Inc.
Advertisement
Table of Contents
