Vswitch Security Protection Technology (II) (1)

Traffic and Port Speed Limit Control Technology
To prevent port congestion caused by high-traffic data transmission and eliminate the impact of malicious or poisoned users on the network, the traffic and port speed limit control technology can be used.
Configure port traffic threshold
By configuring the port traffic threshold, the system can periodically monitor the port data traffic. When the data traffic on the port exceeds the configured threshold, the system automatically closes the port and sends an alarm message or sends only an alarm message. In the Ethernet port view, configure the port traffic threshold and the processing method after the threshold is exceeded:

flow-constrain time-value flow-value { bps | pps } flow-constrain method { shutdown | trap }

Traffic Monitoring
Traffic monitoring is based on the rate limit of a stream. It can monitor the rate of a specific traffic. If the traffic exceeds the specified specification, corresponding measures are taken, for example, discard messages that exceed the specifications or reset their priority.
Port Speed Limit
Port Speed limit refers to the port speed limit, which limits the total rate of the output packets on the port.
TCP attributes and CPU load control technology
Hacker scans, worms, and so on will cause too many TCP connections. The CPU load is also related to this. Adjusting the TCP attribute of the switch and the packets sent to the CPU can effectively reduce the CPU load.
Configure TCP Properties
Synwait Timer: When a SYN packet is sent, TCP starts the synwait timer. If no response packet is received before synwait times out, the TCP connection is terminated. The timeout value of the synwait timer ranges from 2 ~ 600 seconds. The default value is 75 seconds:

tcp timer syn-timeout time-value

Finwait Timer: When the TCP connection status changes from FIN_WAIT_1 to FIN_WAIT_2, The finwait timer is started. If the finwait timer does not receive the FIN message before the timeout, the TCP connection is terminated. The finwait value range is 76 ~ 3600 seconds. The default value of finwait is 675 seconds:

tcp timer fin-timeout time-value

The size of the receiving and sending buffer for the connection Socket. The value range is 1 ~ 32 K bytes, default value: 4 K Bytes:

tcp window window-size