bneradt opened a new pull request, #10586:
URL: https://github.com/apache/trafficserver/pull/10586

   Per the RFC, MAX_HEADER_SIZE and MAX_CONCURRENT_STREAMS are infinite by 
default. ATS usually doesn't enforce configured h2 SETTINGS until the client 
ACKs those changes. This patch updates ATS to enforce the configured MAX_* 
settings even before the client ACKS the settings update so that a poorly 
behaving client can't run ATS out of resources by opening up an unreasonable 
amount of streams.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to