[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: IPsec and TCP



> A minor modification is needed to drop TCP SYN packets piling up in a
> bottleneck router: if the older packet contains no flags or data, OR
> if the newer packet contains all data and flags of the older packet,
> then the older packet can be replaced with the newer one.

You can drop the first half of the OR without change in its effect.
And since SYN pileup may well prove to be the common case, there
maybe be no speed payoff to checking for oldFlags==0 before checking
oldFlags|newFlags == newFlags.