rfc-4987

TCP SYN Flooding Attacks and Common Mitigations

W. Eddy
date2007-08 streamIETF areawit wgtcpm statusINFORMATIONAL pages19 canonicalhttps://www.rfc-editor.org/rfc/rfc4987 doi10.17487/RFC4987 errataview
This document describes TCP SYN flooding attacks, which have been well-known to the community for several years. Various countermeasures against these attacks, and the trade-offs of each, are described. This document archives explanations of the attack and common defense techniques for the benefit of TCP implementers and administrators of TCP servers or networks, but does not make any standards-level recommendations. This memo provides information for the Internet community.