There’s a security bulletin referring to “Linux Kernel TCP SACK Denial of Service Issues” with the current AMI. I believe the updated AMI that addresses this issue is ami-054c7523f88819252
.
Could you please make a rack release with this, or more recent, AMI version?