Re:Google mitigated the largest DDoS attack to date, peaking...
by ivanjermakov on Tuesday October 10, 2023 @09:29AM
(#37831831)
Patch your HTTP server to mitigate the Rapid Reset attack:
> To mitigate against the non-cancelling variant of this attack, we recommend that HTTP/2 servers should close connections that exceed the concurrent stream limit. This can be either immediately or after some small number of repeat offenses.
> To mitigate against the non-cancelling variant of this attack, we recommend that HTTP/2 servers should close connections that exceed the concurrent stream limit. This can be either immediately or after some small number of repeat offenses.
https://cloud.google.com/blog/products/identity-security/how...