Preventing DoS Attacks
Migrate SYNs are heavyweight
- Require real computation (SHA-1 hash)
- Thus Migrate SYN floods are more dangerous than standard SYN floods
A pre-computable token guards against frivolous computation
- Refreshing tokens after each successful migration makes replay window very small