[GitHub] [netbeans] jgneff commented on issue #4890: Building with proxies causes DoS attack on OSU

[GitBox <gi...@apache.org>]

jgneff commented on issue #4890:
URL: https://github.com/apache/netbeans/issues/4890#issuecomment-1296379646

   > java.io.IOException: Could not connect to https://netbeans.osuosl.org/binaries/4B4DCA62F8C4A1954AE6D286955C36CC50B8CC3A-exechlp-1.2.zip within 15000 milliseconds
   >
   > I supposed you tested your setup this weekend? :)
   
   That could have been me, based on the timestamp (`Fri 28 Oct 2022 05:41:42 PM PDT`). That's the part I don't know: whether the OSU Web servers mitigate such attacks only through a `RequestReadTimeout` directive, or do they also limit the maximum number of connections from a single IP address. See the section ["How is a Slowloris attack mitigated?"](https://www.cloudflare.com/learning/ddos/ddos-attack-tools/slowloris/) on the Cloudflare page about Slowloris.
   
   If they do both, then the DoS attack is really just self-inflicted with a limited impact on other users of the Web server. I suspect, though, that they're using only the request-read header timeout, which means other users could encounter problems, too.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@netbeans.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@netbeans.apache.org
For additional commands, e-mail: notifications-help@netbeans.apache.org

For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists