Configuration Guide Configuring FPM
2 Configuring FPM
2.1 Overview
The flow platform (FPM) is a platform for the acceleration of packet service processing. Because IP packets have the flow
attribute, the FPM provides services with the function to identify the flow attribute of IP packets before service processing, so
as to improve service processing efficiency. The FPM is a fundamental platform. It is loaded upon system startup. The
configuration commands described in this document are provided to implement FPM configuration and management. In
general, the default configuration of the FPM can already meet practical requirements.
The following sections describe the FPM only.
2.1.1.1 Protocols and Standards
N/A
2.2 Applications
Configuring the packet receiving threshold
A standalone device serves as the gateway to forward packets.
Configuring loose TCP status check
Perform active/standby switchover in the AS environment.
2.2.1 Configuring the Packet Receiving Threshold
2.2.1.1 Scenario
When the device receives a large number of repeated TCP connection requests in a local area network (LAN), no legitimate
connection can be established if the device cannot receive any handshake response packet from the peer. In this case,
attacks probably occur. You can perform FPM configuration to restrict the number of TCP connection requests, so as to
effectively defend against such attacks.
2.2.1.2 Corresponding Protocols
Enable the strict packet status tracing function on the forwarding device.
Configure a low TCP-SYN-SENT packet threshold.
To Next Page
Loading...
Need help?
General
