Extremely high ksoftirqd when UDP flooding an embedded device
by Pieter Cardoen from LinuxQuestions.org on (#4QHDX)
Dear
I am trying to make my embedded device robust against DoS attack but I notice that the system has a tremendously high ksoftirqd load causing the system to hang completely.
I am testing the system by pushing a large number of UDP messages to the system (> 250k messages per second).
Is there a way to protect our system against an attack of this kind?
Could we use traffic control or iptables for this?
This has been tested on a custom board with imx6ul processor.
Thanks
Pieter


I am trying to make my embedded device robust against DoS attack but I notice that the system has a tremendously high ksoftirqd load causing the system to hang completely.
I am testing the system by pushing a large number of UDP messages to the system (> 250k messages per second).
Is there a way to protect our system against an attack of this kind?
Could we use traffic control or iptables for this?
This has been tested on a custom board with imx6ul processor.
Thanks
Pieter