Code

h2: Rapid reset mitigations (7.3)#4011

Code

Merged

dridi merged 29 commits intovarnishcache:7.3varnishcache/varnish-cache:7.3from dridi:rapid_reset_7.3dridi/varnish-cache:rapid_reset_7.3Copy head branch name to clipboardOct 24, 2023

+858-44

Commits

Commits on Oct 18, 2023

• Bump cli_limit to fit param.show -j with more parameters coming

  

  nigoroll

  authored and

  dridi

  committed
  b9074c6

• h2: Add a rate limit facility for h/2 RST handling

  Show description for 5cdffa1
  

  daghf

  authored and

  dridi

  committed
  5cdffa1

• Introduce RAPID_RESET as a sess_close reason

  

  daghf

  authored and

  dridi

  committed
  54146bc

• Add param h2_rapid_reset

  Show description for 74bbb48
  

  daghf

  authored and

  dridi

  committed
  74bbb48

• Polish h2_rapid_reset docs

  

  nigoroll

  authored and

  dridi

  committed
  de3a875

• Flexelinting

  

  bsdphk

  authored and

  dridi

  committed
  d241f13

• slinkified dridi-polish

  

  nigoroll

  authored and

  dridi

  committed
  874a7cc

• vtc: Avoid cycling the barrier in t02014

  Show description for 2eac591
  dridi

  committed
  2eac591

• transport: New poll method

  Show description for 467a4db
  dridi

  committed
  467a4db

• vcl_vrt: Skip VCL execution if the client is gone

  Show description for fa83fee
  dridi

  committed
  fa83fee

• http2_session: Implement transport polling

  Show description for a1501a6
  dridi

  committed
  a1501a6

• vtc: Stabilize r3996 and increase coverage

  Show description for 84b67dc
  dridi

  committed
  84b67dc

• vtc: Missing synchronization in t02025

  Show description for ae7b0b5
  dridi

  committed
  ae7b0b5

• Copy rapid reset parameters to the h2 session

  Show description for f5f8f27
  

  nigoroll

  authored and

  dridi

  committed
  f5f8f27

• Add vmod_h2 to control rapid_reset parameters per session

  Show description for c21f9b2
  

  nigoroll

  authored and

  dridi

  committed
  c21f9b2

• Start with a reasonable default for h2_rapid_reset_limit

  Show description for 53a1cd5
  

  nigoroll

  authored and

  dridi

  committed
  53a1cd5

• Adjust test case to previous commit

  Show description for f064f64
  

  nigoroll

  authored and

  dridi

  committed
  f064f64

• Flexelinting

  Show description for f28e5da
  

  nigoroll

  authored and

  dridi

  committed
  f28e5da

• vmod_h2: VRT_fail if called outside of client context

  Show description for 941d3fd
  

  daghf

  authored and

  dridi

  committed
  941d3fd

Commits on Oct 23, 2023

• Redo H2 field validation

  Show description for 2e361de
  

  bsdphk

  authored and

  dridi

  committed
  2e361de

• Slightly more coverage & consistency

  

  bsdphk

  authored and

  dridi

  committed
  fec46c8

• hpack: Turn header validation state into an enum

  Show description for 5e5a8cc
  

  walid-git

  authored and

  dridi

  committed
  5e5a8cc

• hpack: Check illegal header blanks with vct_issp()

  Show description for 34dde81
  

  walid-git

  authored and

  dridi

  committed
  34dde81

• hpack: Validate header values with vct_ishdrval()

  Show description for 5db4965
  

  walid-git

  authored and

  dridi

  committed
  5db4965

• hpack: Remove redundant/incorrect header validation

  Show description for 01059ea
  

  walid-git

  authored and

  dridi

  committed
  01059ea

• vtc: More HPACK header validation coverage

  Show description for 2478263
  

  walid-git

  authored and

  dridi

  committed
  2478263

• vtc: Coverage for h2 empty header in t02023

  dridi

  committed
  05123d4

Commits on Oct 24, 2023

• vmod_h2: Polish manual

  dridi

  committed
  2df7705

• build: Generate and install man/vmod_h2.3

  dridi

  committed
  990bf81