Eric Dumazet 64db5933c7 icmp: increase net.ipv4.icmp_msgs_{per_sec,burst} ...

These sysctls were added in 4cdf507d54 ("icmp: add a global rate
limitation") and their default values might be too small.

Some network tools send probes to closed UDP ports from many hosts
to estimate proportion of packet drops on a particular target.

This patch sets both sysctls to 10000.

Note the per-peer rate-limit (as described in RFC 4443 2.4 (f))
intent is still enforced.

This also increases security, see b38e7819ca
("icmp: randomize the global rate limiter") for reference.

Signed-off-by: Eric Dumazet <edumazet@google.com>
Reviewed-by: Kuniyuki Iwashima <kuniyu@google.com>
Link: https://patch.msgid.link/20260223161742.929830-1-edumazet@google.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>

2026-02-24 17:50:12 -08:00

..

caif

…

device_drivers

Merge tag 'net-next-7.0' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next

2026-02-11 19:31:52 -08:00

devlink

net/mlx5: implement swp_l4_csum_mode via devlink params

2025-11-20 19:01:22 -08:00

diagnostic

Documentation: use a source-read extension for the index link boilerplate

2026-01-23 11:59:34 -07:00

dsa

Documentation: net: dsa: mention simple HSR offload helpers

2025-12-01 16:51:55 -08:00

mac80211_hwsim

…

net_cachelines

tcp: try to avoid safer when ACKs are thinned

2026-02-03 15:13:24 +01:00

pse-pd

…

xfrm

net: Move XFRM documentation into its own subdirectory

2025-11-12 08:30:03 +01:00

6lowpan.rst

…

6pack.rst

net: 6pack: Demote "How to turn on 6pack support" section heading

2025-10-21 10:57:45 +02:00

af_xdp.rst

…

alias.rst

…

arcnet-hardware.rst

Documentation: ARCnet: Update obsolete contact info

2025-10-31 18:08:08 -07:00

arcnet.rst

Documentation: ARCnet: Update obsolete contact info

2025-10-31 18:08:08 -07:00

atm.rst

…

ax25.rst

Documentation: networking: ax25: update the mailing list info.

2025-10-21 17:41:57 -07:00

bareudp.rst

…

batman-adv.rst

…

bonding.rst

…

bridge.rst

…

can_ucan_protocol.rst

…

can.rst

Merge tag 'linux-can-fixes-for-6.18-20251014' of git://git.kernel.org/pub/scm/linux/kernel/git/mkl/linux-can

2025-10-15 17:56:20 -07:00

cdc_mbim.rst

…

checksum-offloads.rst

…

dctcp.rst

…

devmem.rst

…

dns_resolver.rst

net: dns_resolver: Fix request-key cross-reference

2025-09-26 15:21:38 -07:00

driver.rst

…

eql.rst

…

ethtool-netlink.rst

ethtool: netlink: add ETHTOOL_MSG_MSE_GET and wire up PHY MSE access

2025-11-03 18:32:27 -08:00

failover.rst

…

fib_trie.rst

…

filter.rst

…

gen_stats.rst

…

generic_netlink.rst

…

generic-hdlc.rst

…

gtp.rst

…

ieee802154.rst

…

ila.rst

…

index.rst

Merge tag 'net-next-7.0' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next

2026-02-11 19:31:52 -08:00

ioam6-sysctl.rst

…

iou-zcrx.rst

io_uring/zcrx: document area chunking parameter

2026-01-14 02:13:37 +00:00

ip_dynaddr.rst

…

ip-sysctl.rst

icmp: increase net.ipv4.icmp_msgs_{per_sec,burst}

2026-02-24 17:50:12 -08:00

ipsec.rst

…

ipv6.rst

…

ipvlan.rst

…

ipvs-sysctl.rst

…

iso15765-2.rst

…

j1939.rst

…

kapi.rst

…

kcm.rst

…

l2tp.rst

…

lapb-module.rst

…

mac80211-auth-assoc-deauth.txt

…

mac80211-injection.rst

…

mctp.rst

…

mpls-sysctl.rst

…

mptcp-sysctl.rst

…

mptcp.rst

…

msg_zerocopy.rst

…

multi-pf-netdev.rst

…

multiqueue.rst

…

napi.rst

net: Extend NAPI threaded polling to allow kthread based busy polling

2025-11-03 18:11:40 -08:00

net_dim.rst

…

net_failover.rst

Documentation: net: net_failover: Separate cloud-ifupdown-helper and reattach-vf.sh code blocks marker

2025-10-17 16:28:29 -07:00

netconsole.rst

Documentation: netconsole: Separate literal code blocks for full and short netcat command name versions

2025-10-31 16:54:22 -07:00

netdev-features.rst

…

netdevices.rst

Documentation: net: Fix typos in netdevices.rst

2026-01-25 13:03:43 -08:00

netfilter-sysctl.rst

…

netif-msg.rst

…

netmem.rst

…

nexthop-group-resilient.rst

…

nf_conntrack-sysctl.rst

…

nf_flowtable.rst

…

nfc.rst

net: nfc: Format userspace interface subsection headings

2025-10-21 10:57:45 +02:00

oa-tc6-framework.rst

…

openvswitch.rst

…

operstates.rst

…

packet_mmap.rst

…

page_pool.rst

…

phonet.rst

…

phy-link-topology.rst

…

phy-port.rst

Documentation: networking: Document the phy_port infrastructure

2026-01-13 18:52:36 -08:00

phy.rst

net: phy: remove unused fixup unregistering functions

2026-01-15 19:48:26 -08:00

pktgen.rst

…

plip.rst

…

ppp_generic.rst

…

proc_net_tcp.rst

…

psp.rst

psp: add documentation

2025-09-18 12:32:06 +02:00

radiotap-headers.rst

…

rds.rst

…

regulatory.rst

…

representors.rst

…

rxrpc.rst

Documentation: rxrpc: Demote three sections

2025-09-24 18:12:10 -07:00

scaling.rst

docs: networking: mention that RSS table should be 4x the queue count

2026-02-02 17:06:00 -08:00

sctp.rst

…

secid.rst

…

seg6-sysctl.rst

doc: fix seg6_flowlabel path

2025-10-12 22:51:37 +01:00

segmentation-offloads.rst

net: gso: restore ids of outer ip headers correctly

2025-09-25 12:42:49 +02:00

sfp-phylink.rst

…

skbuff.rst

…

smc-sysctl.rst

net/smc: handle -ENOMEM from smc_wr_alloc_link_mem gracefully

2025-10-30 13:31:43 +01:00

snmp_counter.rst

…

sriov.rst

…

statistics.rst

net: docs: add missing features that can have stats

2025-10-20 18:31:25 -07:00

strparser.rst

…

switchdev.rst

…

sysfs-tagging.rst

…

tc-actions-env-rules.rst

…

tc-queue-filters.rst

…

tcp_ao.rst

…

tcp-thin.rst

…

team.rst

…

timestamping.rst

net: remove legacy way to get/set HW timestamp config

2026-01-20 18:21:27 -08:00

tipc.rst

…

tls-handshake.rst

…

tls-offload-layers.svg

…

tls-offload-reorder-bad.svg

…

tls-offload-reorder-good.svg

…

tls-offload.rst

docs: tls: Enhance TLS resync async process documentation

2026-01-17 15:26:13 -08:00

tls.rst

net/tls: support setting the maximum payload size

2025-10-27 16:13:42 -07:00

tproxy.rst

…

tuntap.rst

…

udplite.rst

…

vrf.rst

…

vxlan.rst

…

x25-iface.rst

…

x25.rst

…

xdp-rx-metadata.rst

…

xsk-tx-metadata.rst

…