]> git.ipfire.org Git - thirdparty/pdns.git/commit
dnsdist: Enforce concurrent streams count for pending queries
authorRemi Gacogne <remi.gacogne@powerdns.com>
Thu, 19 Jun 2025 09:18:27 +0000 (11:18 +0200)
committerRemi Gacogne <remi.gacogne@powerdns.com>
Thu, 21 Aug 2025 10:28:35 +0000 (12:28 +0200)
commit0214032c5f09fcfb440e5c5120f1491cb4f0fda4
treed49f22dc72ed1c822c6c24dfa0ac013113ef102e
parent6929121e4e2745d9b7b010bdbfae66454c35e019
dnsdist: Enforce concurrent streams count for pending queries

The gist of the `MadeYouRest` attack is that streams can be reset
by the client, and thus no longer count towards the maximum number
of a streams as far as the library is concerned, while the server
is still processing the query and doing actual work.
This pull request introduces a counter for "killed but still being
processed streams" to prevent it.

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>
pdns/dnsdistdist/dnsdist-nghttp2-in.cc
pdns/dnsdistdist/dnsdist-nghttp2-in.hh