August 2017
Intermediate to advanced
278 pages
8h 53m
English
Each kernel parameter can be set in real time, which allows you to test and refine the changes on the fly. To do this, you can use the sysctl program to change these parameters. For starters, we can ensure that TCP syncookies (a method of resisting low level denial of service attacks) are enabled:
sysctl -w net.ipv4.tcp_syncookies=1
If you want the change to be persistent between boots, we can add this to the sysctl configuration file, generally located at /etc/sysctl.conf. Here's what the configuration line should look like:
net.ipv4.tcp_syncookies = 1
You can test and retrieve what value any of the kernel parameters are set to using sysctl again in read-only mode:
sysctl net.ipv4.tcp_syncookies
If you' set it correctly, ...
Read now
Unlock full access