Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Do you provide against a potential DoS set-up? #4

Open
Eorhim opened this issue Feb 14, 2019 · 0 comments
Open

Do you provide against a potential DoS set-up? #4

Eorhim opened this issue Feb 14, 2019 · 0 comments

Comments

@Eorhim
Copy link

Eorhim commented Feb 14, 2019

With UDP reflection you can easily set-up a network DoS by running the service on two or more hosts and spoof a UDP package with the origin of the other reflector. They will play ping-pong with each other indefinitely.

See https://en.wikipedia.org/wiki/Echo_Protocol and https://en.wikipedia.org/wiki/Denial-of-service_attack

Possible mitigation: store the received packages in a LRU cache and only respond once on once per time-frame.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant