11–17 of 17 posts
Is this similar to Slowloris at all? Edit: With Slowloris it looks like the connection isn't closed client side though? Although I'm just wondering they're dropping the FINs anyway.
With Slowloris there are no missing TCP packets and client sends the correct request but VERY slowly.
Earlier quoted context omitted.
>IPv6 changes this a bit, so one might want to do a limit per subnet, say 30 per /64. Works great until your users use an ISP that hands out /128 rather than /64
> ISP that hands out /128 rather than /64 Seriously? Who even hands out one single /64 or smaller? it's not like handing out /48s instead is going to deplete the IPv6 pool space [0]. [0] https://www.wolframalpha.com/input/?i=2%5E48+%2F+people+on+e...
Budget VPS/dedicated server providers, such as OVH: https://www.kimsufi.com/en/servers.xml
Surprised by the amount of work done on the research but none(?) on past research on the same topic
(And yeah, this is a classic failure mode of TCP...)
Earlier quoted context omitted.
> ISP that hands out /128 rather than /64 Seriously? Who even hands out one single /64 or smaller? it's not like handing out /48s instead is going to deplete the IPv6 pool space [0]. [0] https://www.wolframalpha.com/input/?i=2%5E48+%2F+people+on+e...
> Who even hands out one single /64 or smaller? Budget VPS/dedicated server providers, such as OVH: https://www.kimsufi.com/en/servers.xml
Earlier quoted context omitted.
> ISP that hands out /128 rather than /64 Seriously? Who even hands out one single /64 or smaller? it's not like handing out /48s instead is going to deplete the IPv6 pool space [0]. [0] https://www.wolframalpha.com/input/?i=2%5E48+%2F+people+on+e...
> Who even hands out one single /64 or smaller? Budget VPS/dedicated server providers, such as OVH: https://www.kimsufi.com/en/servers.xml
Earlier quoted context omitted.
> Who even hands out one single /64 or smaller? Budget VPS/dedicated server providers, such as OVH: https://www.kimsufi.com/en/servers.xml
DigitalOcean hands out /124s. Then they realized that blackholes were hitting multiple droplets (VMs) at once because people blackhole entire /64s, so their solution was to block ports on IPv6 instead of doing the sensible thing and handing out /64s to the droplets instead.
Earlier quoted context omitted.
> ISP that hands out /128 rather than /64 Seriously? Who even hands out one single /64 or smaller? it's not like handing out /48s instead is going to deplete the IPv6 pool space [0]. [0] https://www.wolframalpha.com/input/?i=2%5E48+%2F+people+on+e...
> Who even hands out one single /64 or smaller? Budget VPS/dedicated server providers, such as OVH: https://www.kimsufi.com/en/servers.xml