Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support for custom rate limiting with murmur.ini file? #3605

Closed
DuckBoss opened this issue Feb 22, 2019 · 24 comments
Closed

Support for custom rate limiting with murmur.ini file? #3605

DuckBoss opened this issue Feb 22, 2019 · 24 comments
Labels
bug A bug (error) in the software linux server

Comments

@DuckBoss
Copy link
Contributor

DuckBoss commented Feb 22, 2019

Can there be a config for modifying the LeakyBucket rate limiting to increase the number of maximum messages sent per second? I have a private server with a bot that is unable to send messages due to the hard coded rate limiting.

If someone could get back to me about this, that would be great!

EDIT: I was asking this question for the 1.2.8-2+deb8u1 Armhf build, since the 1.3 snapshot already features per user rate limiting in the murmur.ini

@davidebeatrici
Copy link
Member

LeakyBucket has been introduced in Murmur 1.3 (#3510), 1.2.x doesn't have a rate limiting system.

@DuckBoss
Copy link
Contributor Author

That's what I thought from the stuff I've seen, however 1.2.8-2+deb8u1 Armhf build was a security update that was forced on debian which included the rate limiting system. Could you check this and let me know?

@davidebeatrici
Copy link
Member

What distribution and version are you using?

@DuckBoss
Copy link
Contributor Author

DuckBoss commented Feb 24, 2019

Version: 1.2.8-2+deb8u1 ARMHF Build (Debian based)
OS: Raspbian GNU/Linux 8.0 (Jessie)
Raspbian is a debian-based OS for the raspberrypi (arm architecture)

Is this what you needed?

@davidebeatrici
Copy link
Member

Yes, thank you.

@crknadle Is 1.2.8-2+deb8u1 built without b44b1f2?

@crknadle
Copy link
Contributor

1.2.8+deb8u1 was uploaded by the Debian LTS team without any co-ordination from/with me.
Best I can tell yes, the patch used doesn't include the rate-limiting from b44b1f2.

The specific commits referenced in CVE--2018-20743.patch are 44b9004 and f7221c1.

@DuckBoss
Copy link
Contributor Author

Is this something that has to be corrected by Debian LTS team or something that the mumble team can update?

@crknadle
Copy link
Contributor

I would assume the Debian LTS team and/or I could update the package if there was a bug to be fixed, but right now all of the security bugs in Jessie are marked as "fixed":
https://security-tracker.debian.org/tracker/source-package/mumble

I have patches for the rate limiting for Mumble 1.2 that I backported from Mumble 1.3 during the Christmas holiday, which includes a rate-limiting patch; I'll check to see if they apply to Mumble 1.2.8 in Jessie.

@crknadle
Copy link
Contributor

I checked; the rate limit patch I had backported from Mumble 1.3 for 1.2.18 won't directly apply for 1.2.8, but the prior patch without the rate limit does.

@DuckBoss
Copy link
Contributor Author

Someone else had identical issues to mine with the 1.2.8+deb8u1 update so I referenced this issue for them.

@crknadle
Copy link
Contributor

I think there may be a bigger issue with the fix used in Mumble 1.2.8+deb8u1 -- parts of the patch require c++11 (and those sections are skipped if c++11 is not available) and the package in Jessie is not built with c++11. (The package in Stretch is.) Building with c++11 requires CONFIG*=c+11 in the debian/rules which the update package for Jessie doesn't use. I have no idea if the resulting package was tested to see if the fix functioned as expected. I think it's time I contact the author of the upload.

@davidebeatrici davidebeatrici added linux server bug A bug (error) in the software debian labels Feb 28, 2019
@DuckBoss
Copy link
Contributor Author

Hi, did you ever contact the author of the upload? I'm just checking in on the status of this issue.

@crknadle
Copy link
Contributor

I had not written the upstream author yet, so I did so now. I've had a request to upload Mumble 1.3.0-rc1 to try to get it in the Buster (Debian 10) release even though it's in "full freeze", so I'm likely going to be focusing on that more (for now).

@bh-e
Copy link

bh-e commented Apr 1, 2019

Hi LTS uploader here. I will prepare an update this week itself.

@DuckBoss
Copy link
Contributor Author

DuckBoss commented Apr 1, 2019

Thanks for getting back to me everyone =)

@bh-e
Copy link

bh-e commented Apr 3, 2019

Hello @DuckBoss , Can you test with new build https://people.debian.org/~abhijith/upload/

@DuckBoss
Copy link
Contributor Author

DuckBoss commented Apr 6, 2019

@bh-e Thanks! I'll run some tests on this build and let you know how it goes.

@DuckBoss
Copy link
Contributor Author

DuckBoss commented Apr 9, 2019

@bh-e I wasn't able to test the new build since I needed the armhf build. I checked your link but I only saw the update available for the amd64 architecture.

Version: 1.2.8-2+deb8u1 ARMHF Build (Debian based)
OS: Raspbian GNU/Linux 8.0 (Jessie)
Raspbian is a debian-based OS for the raspberrypi (arm architecture)

Do you have an armhf build as referenced here from my previous comment?

@bh-e
Copy link

bh-e commented Apr 9, 2019

@DuckBoss , ah !. Let me see what I can do.

@DuckBoss
Copy link
Contributor Author

@bh-e Hello! Just checking in since it's been a couple days. Do you have an armhf build available for testing?

@bh-e
Copy link

bh-e commented Apr 26, 2019

DuckBoss. My armhf lxc container setup is not working. Can you build yourself a copy by pulling that dsc file. I will be backporting the version in stable to Jessie. Right now, I am busy with some personal stuff. I will start working on it from next week Wednesday.

@DuckBoss
Copy link
Contributor Author

DuckBoss commented May 7, 2019

Thanks for updating me on this, unfortunately my raspberry pi that I was running the server on is dead and I won't be able to test your build. I'll see if I can get one of my friends to try it out and I'll let you know how it goes!

@DuckBoss DuckBoss closed this as completed May 7, 2019
@DuckBoss DuckBoss reopened this May 7, 2019
@DuckBoss
Copy link
Contributor Author

DuckBoss commented May 7, 2019

Oops didn't mean to close ^

@Krzmbrzl
Copy link
Member

Krzmbrzl commented Jun 6, 2020

To address the original topic: THe rate-limiter can be configured via https://wiki.mumble.info/wiki/Murmur.ini#messagelimit_and_messageburst

@Krzmbrzl Krzmbrzl closed this as completed Jun 6, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug A bug (error) in the software linux server
Projects
None yet
Development

No branches or pull requests

5 participants