3 ms·
Patch your HTTP server to mitigate the Rapid Reset attack: > To mitigate against the non-cancelling variant of this attack, we recommend that HTTP/2 servers sh
by ivanjermakov 3y ago
Patch your HTTP server to mitigate the Rapid Reset attack:
> To mitigate against the non-cancelling variant of this attack, we recommend that HTTP/2 servers should close connections that exceed the concurrent stream limit. This can be either immediately or after some small number of repeat offenses.
https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack https://cloud.google.com/blog/products/identity-security/how...