SYN flooding during boot-up


(Sorostaran) #1

I am getting a flood of unACKed SYNs during boot-up/start of ElasticSearch servers that sends the servers into syncookie mode.

Server log: "Possible SYN flooding on port 9300. Sending cookies."

Is this normal?


(Shay Banon) #2

Its probably a result of the initial connection done between the nodes in the cluster. How many nodes do you have? If they connect, then all is well, and you don't see the messages, then all is well.
On Thursday, March 3, 2011 at 7:48 PM, Sorostaran wrote:

I am getting a flood of unACKed SYNs during boot-up/start of ElasticSearch
servers that sends the servers into syncookie mode.

Server log: "Possible SYN flooding on port 9300. Sending cookies."

Is this normal?

--
View this message in context: http://elasticsearch-users.115913.n3.nabble.com/SYN-flooding-during-boot-up-tp2627162p2627162.html
Sent from the ElasticSearch Users mailing list archive at Nabble.com.


(system) #3