News for hackers. Stuff that matters.
Re:Post-mortem for Partial Cloudflare Outage on October 25, ... by ec109685 on Wednesday October 26, 2022 @02:14AM (#33340373)
Would love to learn more about why a tracing function mutates the request (clears headers). That seems like foot gun that would be impossible for anyone not intimately familiar with the function's implementation to avoid.
Re:Post-mortem for Partial Cloudflare Outage on October 25, ... by jgrahamc on Wednesday October 26, 2022 @02:59AM (#33340645)
Internal retro is going to be digging into that question (amongst others). I imagine we’ll update the post with further details.
Re:Post-mortem for Partial Cloudflare Outage on October 25, ... by Thorrez on Wednesday October 26, 2022 @03:20AM (#33340748)
Mutating the headers might make sense if it needs to inject a trace ID into the headers. That doesn't explain why it would clear all headers though.
Re:Post-mortem for Partial Cloudflare Outage on October 25, ... by Cthulhu_ on Wednesday October 26, 2022 @05:24AM (#33341431)
I suspect it'll be a trivial programming error that passed through tests that didn't test whether it leaves other headers unaffected as well as code review.