syncookies


idea: avoid ANY ressource allocation upon reception of the SYN

but we'll need MSS and our ISN later

encode MSS in the sequence number

typically, rest is a hash over addresses, ports, and a secret