Extremely high softirq load > 90 % when DoS attacking embedded device

[Pieter Cardoen]

Dear

I am trying to make my embedded device robust against DoS attack but I notice that the system has a tremendously high softirq load causing the system to hang completely.

I am testing the system by pushing a large number of UDP messages to the system (> 250k messages per second).

Is there a way to protect our system against an attack of this kind?
Could we use traffic control or iptables for this?

Thanks
Pieter

 

[Chuck_919]

Hi there,

Could you please show me your perf top ? As it seems like you may have issues with soqft irq. Does your network card support RSS ? Btw you may want to check this url, and configure RPS - https://access.redhat.com/documenta...x/6/html/performance_tuning_guide/network-rps