Maximum number of drop entries. If this maximum is reached and the CPU is in high-load condition, the DDOS protection mode will be activated.