By default the module ip_conntrack is installed into the kernel. My question is simple, is having ip_conntrack a performance booster for better tracking of connections? On VPS nodes they do not have it installed and a lot of people point out that you need to tune for GET Floods and other attacks so does NOT having ip_conntrack make your server more stable from such attacks?
asked Sep 3, 2012 at 15:55
Add a comment
|
1 Answer
ip_conntrack is required for stateful packet filtering in netfilter (the Linux kernel packet filter).
answered Sep 3, 2012 at 19:25
