disable udp in default config to avoid memcrashed aplification attacks

https://blog.cloudflare.com/memcrashed-major-amplification-attacks-from-port-11211/

diff --git a/memcached.sysconfig b/memcached.sysconfig
index 4157db19c942196adbe177a1a356a1354daa4404..089e9bf70c0a22f8209f54b97d74521ac2292c85 100644 (file)
--- a/memcached.sysconfig
+++ b/memcached.sysconfig
@@ -19,7 +19,10 @@ SERVICE_RUN_NICE_LEVEL="+0"
 LISTEN="127.0.0.1:11211"
 
 # other options not defined earlier
-#MEMCACHED_OPTS=""
+
+# -U 0 to disable UDP listen:
+#      https://blog.cloudflare.com/memcrashed-major-amplification-attacks-from-port-11211/
+MEMCACHED_OPTS="-U 0"
 
 # Set ulimit at least as high as MAXCONN
 #SERVICE_LIMITS="-n $MAXCONN"