Forum Discussion

Walter_Kacynski's avatar
Walter_Kacynski
Icon for Cirrostratus rankCirrostratus
Apr 29, 2016

mptcp-mobile-optimized and Hardware SYN Cookie Protection

Does anyone know why the TCP protocol profile mptcp-mobile-optimized ships with Hardware SYN Cookie Protection disabled? It is still enabled on tcp-mobile-optimized. Here is a copy of my two profi...
application delivery
LTM
profile
protocol
tcp
tcp profile
TMOS
Yann_Desmarest's avatar
Yann_Desmarest
Icon for Cirrus rankCirrus
May 03, 2016

Hello,

 

This is a compatibility issue at the specification level as the M-TCP stack is not designed to support syn-cookie protection. I think that if you activate syn-cookie protection on a m-tcp enabled system, you expose yourself to many false positives and TCP retransmission.