]> git.ipfire.org Git - thirdparty/pdns.git/commit
dnsdist: Enforce concurrent streams count for pending queries
authorRemi Gacogne <remi.gacogne@powerdns.com>
Thu, 19 Jun 2025 09:18:27 +0000 (11:18 +0200)
committerRemi Gacogne <remi.gacogne@powerdns.com>
Thu, 28 Aug 2025 08:36:42 +0000 (10:36 +0200)
commitd819350cac53cdc393040885008829dd95950afc
tree12b13430c3237bd30b675f5c66f416b0ba312733
parenta8a72e4426dea42e3660d362dcdf70e92a07b75f
dnsdist: Enforce concurrent streams count for pending queries

The gist of the `MadeYouRest` attack is that streams can be reset
by the client, and thus no longer count towards the maximum number
of a streams as far as the library is concerned, while the server
is still processing the query and doing actual work.
This pull request introduces a counter for "killed but still being
processed streams" to prevent it.

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>
(cherry picked from commit 0214032c5f09fcfb440e5c5120f1491cb4f0fda4)
pdns/dnsdistdist/dnsdist-nghttp2-in.cc
pdns/dnsdistdist/dnsdist-nghttp2-in.hh