Research Article

An Efficient High-Throughput and Low-Latency SYN Flood Defender for High-Speed Networks

Table 1

Header modification in two cases: converting SYN to SYN/ACK packet and converting ACK to RST packet.

Header fields SYN SYN/ACKACK RST

IP srcIP dstIP dst
IP dstIP srcIP src
TCP/UDP src portTCP/UDP dst portTCP/UDP dst port
TCP/UDP dst portTCP/UDP src portTCP/UDP src port
FlagSYN/ACKRST
ACK numberSequence number + 1Reset to zero
Sequence numberCookie numberACK number
Window sizeKeepReset to zero
TCP header checksumRecalculatedRecalculated