mirror of
https://github.com/isc-projects/bind9.git
synced 2026-02-28 20:41:18 -05:00
590e8e0b86
This commit makes number of concurrent HTTP/2 streams per connection
configurable as a mean to fight DDoS attacks. As soon as the limit is
reached, BIND terminates the whole session.
The commit adds a global configuration
option (http-streams-per-connection) which can be overridden in an
http <name> {...} statement like follows:
http local-http-server {
...
streams-per-connection 100;
...
};
For now the default value is 100, which should be enough (e.g. NGINX
uses 128, but it is a full-featured WEB-server). When using lower
numbers (e.g. ~70), it is possible to hit the limit with
e.g. flamethrower.
|
||
|---|---|---|
| .. | ||
| http.c | ||
| netmgr-int.h | ||
| netmgr.c | ||
| tcp.c | ||
| tcpdns.c | ||
| tlsdns.c | ||
| tlsstream.c | ||
| udp.c | ||
| uv-compat.c | ||
| uv-compat.h | ||
| uverr2result.c | ||