linux/Documentation
Eric Dumazet 64db5933c7 icmp: increase net.ipv4.icmp_msgs_{per_sec,burst}
These sysctls were added in 4cdf507d54 ("icmp: add a global rate
limitation") and their default values might be too small.

Some network tools send probes to closed UDP ports from many hosts
to estimate proportion of packet drops on a particular target.

This patch sets both sysctls to 10000.

Note the per-peer rate-limit (as described in RFC 4443 2.4 (f))
intent is still enforced.

This also increases security, see b38e7819ca
("icmp: randomize the global rate limiter") for reference.

Signed-off-by: Eric Dumazet <edumazet@google.com>
Reviewed-by: Kuniyuki Iwashima <kuniyu@google.com>
Link: https://patch.msgid.link/20260223161742.929830-1-edumazet@google.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
2026-02-24 17:50:12 -08:00
..
ABI dmaengine updates for v7.0 2026-02-17 11:47:17 -08:00
PCI
RCU
accel
accounting
admin-guide Including fixes from Netfilter. 2026-02-19 10:39:08 -08:00
arch
block
bpf
cdrom
core-api
cpu-freq
crypto
dev-tools
devicetree dmaengine updates for v7.0 2026-02-17 11:47:17 -08:00
doc-guide
driver-api dmaengine updates for v7.0 2026-02-17 11:47:17 -08:00
edac
fault-injection
fb
features
filesystems overlayfs updates for 7.0 2026-02-17 15:08:24 -08:00
firmware-guide
firmware_class
fpga
gpu
hid
hwmon
i2c
iio
images
infiniband
input
isdn
kbuild
kernel-hacking
leds
litmus-tests
livepatch
locking
maintainer
mhi
misc-devices
mm
netlabel
netlink
networking icmp: increase net.ipv4.icmp_msgs_{per_sec,burst} 2026-02-24 17:50:12 -08:00
nvdimm
nvme
pcmcia
peci
power
process
rust
scheduler
scsi
security
sound
sphinx
sphinx-includes
sphinx-static
spi
staging
sunrpc/xdr
target
tee
timers
tools
trace
translations
usb USB / Thunderbolt changes for 7.0-rc1 2026-02-17 09:36:43 -08:00
userspace-api
virt
w1
watchdog
wmi
.gitignore
.renames.txt
Changes
CodingStyle
Kconfig
Makefile
SubmittingPatches
atomic_bitops.txt
atomic_t.txt
conf.py
docutils.conf
index.rst
memory-barriers.txt
subsystem-apis.rst