diff options
| -rw-r--r-- | release/doc/en_US.ISO8859-1/relnotes/article.sgml | 9 | ||||
| -rw-r--r-- | release/doc/en_US.ISO8859-1/relnotes/common/new.sgml | 9 |
2 files changed, 18 insertions, 0 deletions
diff --git a/release/doc/en_US.ISO8859-1/relnotes/article.sgml b/release/doc/en_US.ISO8859-1/relnotes/article.sgml index a63829cd6b8c..0e5e3da2a0ea 100644 --- a/release/doc/en_US.ISO8859-1/relnotes/article.sgml +++ b/release/doc/en_US.ISO8859-1/relnotes/article.sgml @@ -708,6 +708,15 @@ <varname>net.inet.tcp.strict_rfc1948</varname> and <varname>net.inet.tcp.isn_reseed_interval</varname> sysctl variables. &merged;</para> + + <para>The TCP implementation in &os; now implements a cache of + outstanding, received SYN segments. Incoming SYN segments now + cause entries to be placed in the cache until the TCP three-way + handshake is complete, at which point, memory is allocated for + the connection as usual. This so-called + <quote>syncache</quote> makes a host much more resistant to + TCP-based Denial of Service attacks. Work on this feature was + sponsored by DARPA and NAI Labs.</para> </sect3> <sect3> diff --git a/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml b/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml index a63829cd6b8c..0e5e3da2a0ea 100644 --- a/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml +++ b/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml @@ -708,6 +708,15 @@ <varname>net.inet.tcp.strict_rfc1948</varname> and <varname>net.inet.tcp.isn_reseed_interval</varname> sysctl variables. &merged;</para> + + <para>The TCP implementation in &os; now implements a cache of + outstanding, received SYN segments. Incoming SYN segments now + cause entries to be placed in the cache until the TCP three-way + handshake is complete, at which point, memory is allocated for + the connection as usual. This so-called + <quote>syncache</quote> makes a host much more resistant to + TCP-based Denial of Service attacks. Work on this feature was + sponsored by DARPA and NAI Labs.</para> </sect3> <sect3> |