4 ms·

I'm rather curious why the UDP tracker protocol still exists (and is default on this tracker). Back in the day when the only viable web server was a prefork Apa

by r1ch 7y ago

I'm rather curious why the UDP tracker protocol still exists (and is default on this tracker). Back in the day when the only viable web server was a prefork Apache, the small TCP connections from torrent clients would easily overwhelm servers. Nowadays with event based multi threaded servers, it seems this is no longer an issue but I still see the UDP protocol used very frequently, despite its serious design flaws that allow UDP DoS amplification attacks.

crtasm 7y ago
I'm not aware of any way to cause a UDP amplification attack with a torrent tracker - announcing to it doesn't cause it to connect back to you.
- lossolo 7y ago
  > I'm not aware of any way to cause a UDP amplification attack with a torrent tracker You are getting peers from tracker in the response and it's more data than in announce, which means amplification attack is possible. > announcing to it doesn't cause it to connect back to you. UDP is connectionless protocol, which means it doesn't connect to anything, it just sends data.