Skip to content

Commit

Permalink
Strengthen the SHOULD mitigate text
Browse files Browse the repository at this point in the history
Also, fix the line>80 characters, so we can easily transfer the MD file to punch cards.
  • Loading branch information
huitema committed Apr 20, 2017
1 parent dec12c2 commit bfd754a
Showing 1 changed file with 11 additions and 7 deletions.
18 changes: 11 additions & 7 deletions draft-ietf-quic-transport.md
Original file line number Diff line number Diff line change
Expand Up @@ -2746,18 +2746,22 @@ packets with ACK frames.
The attacks commonly known as Slowloris {{SLOWLORIS}}
try to keep many connections
to the target endpoint open and hold them open as long as possible. These attacks
to the target endpoint open and hold
them open as long as possible. These attacks
can be executed against a QUIC endpoint by slowly sending small amount of
data on an open stream, slowly opening the flow control windows in order
to limit the sender rate, or possibly manufacturing QUIC ACK that
simulate a high loss rate and slow down sending by the other endpoint.
QUIC implementers should consider implementing the
classic mitigations of the Slowloris attack, such as increasing the maximum
number of clients the server will allow, limiting the number of connections
a single IP address is allowed to make, imposing restrictions on the minimum
transfer speed a connection is allowed to have, and restricting the length of
time a client is allowed to stay connected.
QUIC implementers SHOULD implement
mitigations of the Slowloris attack, such as increasing the maximum
number of clients the server will allow,
limiting the number of connections
a single IP address is allowed to make,
imposing restrictions on the minimum
transfer speed a connection is allowed to have,
and restricting the length of
time an endpoint is allowed to stay connected.
# IANA Considerations
Expand Down

0 comments on commit bfd754a

Please sign in to comment.