HTTP/2 Rapid Reset Attack

Re:HTTP/2 Rapid Reset Attack by dang on Thursday October 12, 2023 @03:52PM (#37862306)

Related. Others?

HAProxy is not affected by the HTTP/2 Rapid Reset Attack - https://news.ycombinator.com/item?id=37837043 - Oct 2023 (31 comments)

The largest DDoS attack to date, peaking above 398M rps - https://news.ycombinator.com/item?id=37831062 - Oct 2023 (461 comments)

HTTP/2 Rapid Reset: deconstructing the record-breaking attack - https://news.ycombinator.com/item?id=37831004 - Oct 2023 (22 comments)

HTTP/2 zero-day vulnerability results in record-breaking DDoS attacks - https://news.ycombinator.com/item?id=37830998 - Oct 2023 (69 comments)

The novel HTTP/2 'Rapid Reset' DDoS attack - https://news.ycombinator.com/item?id=37830987 - Oct 2023 (103 comments)

[ Parent | on HN ]

Re:HTTP/2 Rapid Reset Attack by tialaramex on Thursday October 12, 2023 @04:00PM (#37862401)

It's been interesting to see who is affected and who isn't and their rationale.

[ Parent | on HN ]

Re:HTTP/2 Rapid Reset Attack by rewmie on Thursday October 12, 2023 @03:54PM (#37862324)

Thanks for the helpful summary. It does wonder to provide context to such an important topic.

[ Parent | on HN ]

Re:HTTP/2 Rapid Reset Attack by msmith on Thursday October 12, 2023 @05:33PM (#37863438)

[ Parent | on HN ]

Re:HTTP/2 Rapid Reset Attack by nomaxx117 on Thursday October 12, 2023 @07:05PM (#37864330)

I posted another one the other day which didn't get any traction but probably goes in the list: https://news.ycombinator.com/item?id=37835295

[ Parent | on HN ]

Re:HTTP/2 Rapid Reset Attack by jchw on Thursday October 12, 2023 @08:23PM (#37864927)

I don't know if a post to HN has been made (don't think so), but Envoy released 1.27.1 in response to Rapid Reset as well.

[ Parent | on HN ]