bneradt opened a new pull request, #13444:
URL: https://github.com/apache/trafficserver/pull/13444

   HTTP/2 extensions can add enough SETTINGS parameters to exceed the
   defaults, causing Traffic Server to close otherwise valid connections
   before a request. This occurs with Meta forward proxy traffic that
   advertises WebTransport-over-HTTP/2 settings.
   
   This raises the per-frame limit to 16 and the per-minute limit to
   32, retaining abuse protections while allowing protocol growth. This
   also adds an AuTest that sends an extension-rich SETTINGS frame and
   verifies that the subsequent request succeeds.
   
   Fixes: #13443


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to