Skip to content

Do you provide against a potential DoS set-up? #4

@Eorhim

Description

@Eorhim

With UDP reflection you can easily set-up a network DoS by running the service on two or more hosts and spoof a UDP package with the origin of the other reflector. They will play ping-pong with each other indefinitely.

See https://en.wikipedia.org/wiki/Echo_Protocol and https://en.wikipedia.org/wiki/Denial-of-service_attack

Possible mitigation: store the received packages in a LRU cache and only respond once on once per time-frame.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions