SYN Flood Attack Defense

This section describes SYN flood attack defense.

The SYN flood attack defense configurations are as follows.

Table 1 Configuring SYN flood attack defense
Parameter Description

SYN flood attack defense

Threshold

If the SYN packet rate is larger than Threshold, an anomaly is reported to the ATIC management center, and defense is started.

First packet check interval

Supports the configuration of the upper and lower limits of the interval for discarding the first packets. If the actual interval is lower than the lower limit or higher than the upper limit, the packet is considered as the first packet and is discarded. If the actual interval is between the configured lower and upper limits, the packet is a follow-up packet and is permitted.


Copyright © Huawei Technologies Co., Ltd.