RFC 4987: TCP SYN Flooding Attacks and Common Mitigations

This document describes TCP SYN flooding attacks, which have been well-known to the community for several years. Various countermeasures against these…

Read RFC 4987 on the RFC Editor

Outgoing relationships (9 related RFCs)

Informative reference — RFC 793: Transmission Control Protocol
Informative reference — RFC 1321: The MD5 Message-Digest Algorithm
Informative reference — RFC 2827: Network Ingress Filtering: Defeating Denial of Service Attacks which employ IP Source Address Spoofing
Informative reference — RFC 2960: Stream Control Transmission Protocol
Informative reference — RFC 3704: Ingress Filtering for Multihomed Networks
Informative reference — RFC 1144: Compressing TCP/IP Headers for Low-Speed Serial Links
Informative reference — RFC 1644: T/TCP -- TCP Extensions for Transactions Functional Specification
Informative reference — RFC 3013: Recommended Internet Service Provider Security Services and Procedures
Informative reference — RFC 4413: TCP/IP Field Behavior

Incoming relationships (15 related RFCs)

Normatively referenced by — RFC 7414: A Roadmap for Transmission Control Protocol (TCP) Specification Documents
Normatively referenced by — RFC 8803: 0-RTT TCP Convert Protocol
Informatively referenced by — RFC 8085: UDP Usage Guidelines
Informatively referenced by — RFC 9293: Transmission Control Protocol (TCP)
Informatively referenced by — RFC 8684: TCP Extensions for Multipath Operation with Multiple Addresses
Informatively referenced by — RFC 6182: Architectural Guidelines for Multipath TCP Development
Informatively referenced by — RFC 5482: TCP User Timeout Option
Informatively referenced by — RFC 5562: Adding Explicit Congestion Notification (ECN) Capability to TCP's SYN/ACK Packets
Informatively referenced by — RFC 9329: TCP Encapsulation of Internet Key Exchange Protocol (IKE) and IPsec Packets
Informatively referenced by — RFC 6013: TCP Cookie Transactions (TCPCT)
Informatively referenced by — RFC 6191: Reducing the TIME-WAIT State Using TCP Timestamps
Informatively referenced by — RFC 8923: A Minimal Set of Transport Services for End Systems
Informatively referenced by — RFC 7430: Analysis of Residual Threats and Possible Fixes for Multipath TCP (MPTCP)
Informatively referenced by — RFC 9312: Manageability of the QUIC Transport Protocol
Informatively referenced by — RFC 9768: More Accurate Explicit Congestion Notification (AccECN) Feedback in TCP