site becomes slow dut to syn-flood protection
Hello list ,
I have these codes before my incoming rules as a sync flood protection
````````````` # Check hashlimit-htable-expire after 5 min ( 300000 mili second ) iptables -N syn-flood iptables -A INPUT -i $IFACE -p tcp --syn -j syn-flood iptables -A syn-flood -p tcp --syn -m hashlimit \ --hashlimit 4/sec --hashlimit-burst 4 --hashlimit-htable-expire 300000 \ --hashlimit-mode srcip --hashlimit-name testlimit -j RETURN # Drop IP bad IP and put then in blacklist iptables -A syn-flood -m recent --name blacklist --set -j DROP iptables -A INPUT -j syn-flood ````````````````````````````````````
and this makes the sites running at the server very slow, if I comment the above again the sites running well. What might be the safe options of
--hashlimit 4/sec --hashlimit-burst 4
to get back the normal apache connection ?
Thanks