diff --git a/release/doc/en_US.ISO8859-1/relnotes/article.sgml b/release/doc/en_US.ISO8859-1/relnotes/article.sgml index a63829cd6b8..0e5e3da2a0e 100644 --- a/release/doc/en_US.ISO8859-1/relnotes/article.sgml +++ b/release/doc/en_US.ISO8859-1/relnotes/article.sgml @@ -708,6 +708,15 @@ net.inet.tcp.strict_rfc1948 and net.inet.tcp.isn_reseed_interval sysctl variables. &merged; + + The TCP implementation in &os; now implements a cache of + outstanding, received SYN segments. Incoming SYN segments now + cause entries to be placed in the cache until the TCP three-way + handshake is complete, at which point, memory is allocated for + the connection as usual. This so-called + syncache makes a host much more resistant to + TCP-based Denial of Service attacks. Work on this feature was + sponsored by DARPA and NAI Labs. diff --git a/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml b/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml index a63829cd6b8..0e5e3da2a0e 100644 --- a/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml +++ b/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml @@ -708,6 +708,15 @@ net.inet.tcp.strict_rfc1948 and net.inet.tcp.isn_reseed_interval sysctl variables. &merged; + + The TCP implementation in &os; now implements a cache of + outstanding, received SYN segments. Incoming SYN segments now + cause entries to be placed in the cache until the TCP three-way + handshake is complete, at which point, memory is allocated for + the connection as usual. This so-called + syncache makes a host much more resistant to + TCP-based Denial of Service attacks. Work on this feature was + sponsored by DARPA and NAI Labs.