Hi, ATS DEVs,

Recently I opened PR #2335 which implements body buffering before connecting to 
downstream.
Apart from some plugins need to know the body before connecting the server, 
another important reason is to avoid slow-post attack.
Even with activity_timeout and inactivity_timeout, ATS will open connections to 
origins when receiving slow post and will consume resource of the downstream 
servers.
Wondering how do other teams deal with slow-post. Is there some solution 
already can handle it?


Zizhong Zhang
Software Engineer
Traffic Infrastructure
[id:image001.png@01D304CB.AA6B5770]

650.686.8880<tel:(650)%20686-8880>
zizh...@linkedin.com<mailto:zizh...@linkedin.com>
Linkedin<https://www.linkedin.com/in/zizhong-zhang-2799945a/>

Reply via email to