Hi, ATS DEVs, Recently I opened PR #2335 which implements body buffering before connecting to downstream. Apart from some plugins need to know the body before connecting the server, another important reason is to avoid slow-post attack. Even with activity_timeout and inactivity_timeout, ATS will open connections to origins when receiving slow post and will consume resource of the downstream servers. Wondering how do other teams deal with slow-post. Is there some solution already can handle it?
Zizhong Zhang Software Engineer Traffic Infrastructure [id:[email protected]] 650.686.8880<tel:(650)%20686-8880> [email protected]<mailto:[email protected]> Linkedin<https://www.linkedin.com/in/zizhong-zhang-2799945a/>
