Does Caddy have mitigations against Rapid Reset DDOS attacks?

Help
1

Saw the above and thought it was interesting; flaws in HTTP2 enabling these attack vectors. It made me wonder if Caddy has any protections against this sort of thing?

1 Like
2

Looks like golang released 1.21.3 which includes this fix, at least for net/http.

https://groups.google.com/g/golang-nuts/c/mYYWxEE-8ls

1 Like
3

See here:

We’ll cut a release shortly with the fix.

1 Like
4

Thanks for the hard work all, it’s appreciated.

5

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.