asciilifeform: BingoBoingo: they're still pestilential
asciilifeform: fragola makes this impossible in principle, you gotta stow N frags to get any sense of whether the full packet is friend or foe
asciilifeform: the only final solution to ddos is O(1) crapolade packet rejection. ( preferably in iron )
asciilifeform: of course ddosers can send packets with your new protocol # , it doesn't make you bulletproof
asciilifeform: Mocky: incidentally, it is possible to do what i suggested to him then, which is to change the protocol # in the ip header and be generic ip, rather than udp . but only once we have own ip stack.
asciilifeform: Mocky: i suspect that he's rtfm'd since
asciilifeform: Mocky: my suspicion is that under ddos conditions, loss of frags will approach 100%
asciilifeform: i'll observe that if you dispense with fraggism, ip stack becomes fairly easy to write ( i.e. if you support only unfragged udp and nuffin else )
asciilifeform: the ip stack's frag/reasm is one of those things that 'worx until it doesnt'
asciilifeform: imho if you want large messages, oughta have own fragger/reasmer, not the ??? in linux/ciscolade☟︎
asciilifeform: Mocky: me neither, esp. given as it wins nuffin bandwidth-wise
asciilifeform: i for one would rather have no frag reassembly at all if writing ip stack. not only b/c complexity but also this.☟︎
asciilifeform: which not only complicates ip stack ( for when we write one ) but opens up to ddosability ( frags are take-it-or-leave-it, they dun even carry the port # )
asciilifeform: i.e. it is fundamentally an 'allcomers-can-claim-some-ram' item
asciilifeform: even if seems that 100% of 2/3-frag packets make it through in 'laboratory' conditions, still gotta remember that the frag reassembly buffer is the ~exact~ equivalent of the pre-trb 'block orphanage'☟︎
asciilifeform: re : udpism : at the risk of rehashing some of the ancient gossipd thread, i'ma put a few notes re fragging :
asciilifeform: mod6: mostly mired in saecular liquishit
asciilifeform: http://btcbase.org/log/2018-09-28#1855188 << nitpick: >1500byte always fragged, cuz ethernet. but! apparently get sewn back together in time. at least at the currently tried rates, and with mix of sizes ( remains to be seen what receiver will do with a summed MB/s of frags from different people )☝︎
asciilifeform: mircea_popescu: it not only made for very picturesque output in old buggy vtrons, but pretty terrible for blood pressure, as turned out that the supposed 'disable fuzzy' flags dun actually do anyffin in gnupatch
asciilifeform: mircea_popescu: shouldn't take much sweat, anyffing that calls gnupatch could just as readily call phf's
asciilifeform: ( recall, we had gpg-signed patches with 0 robotics for yr+ )
asciilifeform: mircea_popescu: lol recall how we even ended up with v, ' asciilifeform : 'it is obvious!11 how to arrange trb patches' errybodyelse : 'nah' )
asciilifeform: i dun know the specific answer. but suspect it has to do with the sad audio mixer on most os. they wanna hear the game sounds + the chat.
asciilifeform: 'Note that the sender will send each size of package *only once* and it will simply finish once it sent one package of each size' << aaah
asciilifeform: diana_coman's test jig ( i did not modify it except for the dest ip ) currently fires 1 / sec.
asciilifeform: going by the current empirical test, however, a packet that frags into 2 or even 3, typically goes. tho it remains to be seen whether they start falling down once you saturate.
asciilifeform: tho as i understand it, they did not account for the 8 byte udp header size, and thereby still fragged.
asciilifeform: i can see the logic, ethernet frame is 1500 , ip header -- 20 byte
asciilifeform: admittedly this was in the paleolithic '90s
asciilifeform discussed subj with asciilifeform's brother, who answered 'whaddayamean, what size packet, at $defunctgamesco we only ever used 1480, for decade, ideal'☟︎
asciilifeform: interestingly, 1st coupla min seems to show ~0 loss
asciilifeform: will leave it overnight , then post log..
asciilifeform: diana_coman: built & emplaced your sender-receiver, it is running nao, asciilifeformistan <--> BingoBoingostan