Skip to content

Conversation

@WesleyRosenblum
Copy link
Contributor

@WesleyRosenblum WesleyRosenblum commented Sep 1, 2023

Description of changes:

QUIC§21.9 describes a peer denial of service attack that may be mitigated through tracking connection progress relative to processing:

While there are legitimate uses for all messages, implementations SHOULD track cost of processing relative to progress and treat excessive quantities of any non-productive packets as indicative of an attack. Endpoints MAY respond to this condition with a connection error or by dropping packets.

The existing "Connection Supervisor" introduced in #1097 is suitable for this purpose. I've added a citation for this, and have also mentioned this section in the slow-loris example code.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

@WesleyRosenblum WesleyRosenblum enabled auto-merge (squash) September 1, 2023 01:23
@WesleyRosenblum WesleyRosenblum merged commit d1a0702 into main Sep 1, 2023
@WesleyRosenblum WesleyRosenblum deleted the WesleyRosenblum/peerdos branch September 1, 2023 01:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants