Re:Application-Layer DDoS Attack Protection with HAProxy
by ngrilly on Saturday November 10, 2018 @12:52PM
(#18422455)
The article mentions attacks from clients sending slow requests, but what about clients reading the response very slowly?
And coming back to the topic of slow requests, what if an attacker tries a slow POST request, sending the first part of the request at a normal speed until it reach the size of the http-request-buffer, and then sending the rest very slowly? haproxy would let the request pass and the backend will be kept busy.
And coming back to the topic of slow requests, what if an attacker tries a slow POST request, sending the first part of the request at a normal speed until it reach the size of the http-request-buffer, and then sending the rest very slowly? haproxy would let the request pass and the backend will be kept busy.