Maximum number of drop entries. If this maximum is reached and CPU is in high load, DDOS protection mode will be activated.