Anton Vinogradov f770756cba fix(synlimit): raise default synlimit_burst from 1 to 24 ...

The generic-path SYN limiter default of burst=1 admits only one new
connection per source IP, then refills at 48/minute (0.8/s). Telegram
clients open several connections at once on startup/reconnect, so the
extra SYNs are rejected with TCP RST until a token accrues — clients
intermittently fail to connect until the app is restarted.

The iOS fast-path (meta length 64) does not match real-world traffic
behind carrier NAT/NAT64 (SYNs arrive as 60 bytes), so the generic path
governs all clients, iPhone included. Raise its default burst to 24 —
the value already used by the iOS path — so a legitimate startup fan-out
passes. Steady-state rate (48/minute) is unchanged, preserving the
anti-TSPU posture.

Updates the default constant, the default-assertion test, and the EN/RU/DE
CONFIG_PARAMS docs.

2026-07-16 13:04:23 +03:00

..

CONFIG_PARAMS.de.md

fix(synlimit): raise default synlimit_burst from 1 to 24

2026-07-16 13:04:23 +03:00

CONFIG_PARAMS.en.md

fix(synlimit): raise default synlimit_burst from 1 to 24

2026-07-16 13:04:23 +03:00

CONFIG_PARAMS.ru.md

fix(synlimit): raise default synlimit_burst from 1 to 24

2026-07-16 13:04:23 +03:00