Permalink
2 comments
on commit
sign in to comment.
Browse files
disable UDP port by default
As reported, UDP amplification attacks have started to use insecure internet-exposed memcached instances. UDP used to be a lot more popular as a transport for memcached many years ago, but I'm not aware of many recent users. Ten years ago, the TCP connection overhead from many clients was relatively high (dozens or hundreds per client server), but these days many clients are batched, or user fewer processes, or simply anre't worried about it. While changing the default to listen on localhost only would also help, the true culprit is UDP. There are many more use cases for using memcached over the network than there are for using the UDP protocol.
- Loading branch information...
This comment has been minimized.
xuy1202Mar 6, 2018
good job~
xuy1202 repliedMar 6, 2018
good job~
This comment has been minimized.
random-atomMar 19, 2018
Good decision, but a change like this should include a comment in the code explaining why the port is set to 0 so that it isn't accidentally "fixed" by someone in the future.
random-atom repliedMar 19, 2018
Good decision, but a change like this should include a comment in the code explaining why the port is set to 0 so that it isn't accidentally "fixed" by someone in the future.