|
Performance Tradeoffs of TCP Selective Acknowledgment |
|
|
|
Source: IBM.com - Posted by Eckie Silapaswang
|
Selective acknowledgment (SACK) is an optional feature of TCP that is necessary to effectively use all of the available bandwidth of some networks. While SACK is good for throughput, processing this type of acknowledgment has proven to be CPU intensive for the TCP sender. This weakness can be exploited by a malicious peer even under commodity network conditions. This article presents experimental measurements that characterize the extent of the problem within the Linux® TCP stack. SACK is enabled by default on most distributions.
This article provides a detailed analysis of the Linux TCP stack with an in-depth look at SACK. Can exploitation of SACK drive CPU intensity to the point that it can be considered a legitimate DoS attack? Read on to find out!
Read this full article at IBM.com
Powered by AkoComment! |
