Live data from Hacker News

HTTP/2 zero-day vulnerability results in record-breaking DDoS attacks

blog.cloudflare.com

81–82 of 82 posts

Re: HTTP/2 zero-day vulnerability results in record-breaking DDoS attacks

#81
post #70

Earlier quoted context omitted.

There is a maximum bandwidth at which data can arrive. Simply make sure you can always process it faster than the next packet can arrive, or implement proper mitigation in cases where you cannot. It's called programming under soft real-time constraints.

HTTP/1 between a client-server pair incurs per-request overhead which is not present in HTTP/2. You can do more RPS with less CPU if you use HTTP/2.

You receive an Ethernet frame, you send an Ethernet frame.

The concept of a TCP session is purely virtual, it's just a 16-bit integer in the header grouping the packets together.

Re: HTTP/2 zero-day vulnerability results in record-breaking DDoS attacks

#82
post #70

Earlier quoted context omitted.

HTTP/1 between a client-server pair incurs per-request overhead which is not present in HTTP/2. You can do more RPS with less CPU if you use HTTP/2.

You receive an Ethernet frame, you send an Ethernet frame. The concept of a TCP session is purely virtual, it's just a 16-bit integer in the header grouping the packets together.

OK.
Post reply on HN