The 4 million vulnerable hosts they discovered accept unauthenticated IP in IP (IPIP), Generic Routing Encapsulation (GRE), ...

It offers dynamic allocation of packet buffering per port and priority to avoid starvation due to over-allocation. The switching core also features multiple VLAN tagging and untagging operations, ...