Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: Varnish: Bugs
#1087: Requests dropped due to long headers are invisible
 

Index | Next | Previous | View Flat


varnish-bugs at varnish-cache

Jan 26, 2012, 4:19 AM


Views: 161
Permalink
#1087: Requests dropped due to long headers are invisible

#1087: Requests dropped due to long headers are invisible
----------------------+-----------------------------------------------------
Reporter: kristian | Owner:
Type: defect | Status: new
Priority: normal | Milestone:
Component: varnishd | Version: trunk
Severity: normal | Keywords:
----------------------+-----------------------------------------------------
Currently Varnish will not be very specific if a connection is dropped due
to overly long headers. It's assumed to be an attack or otherwise
malicious.

This makes it close to impossible for sysadmins to determine that it's
happening and why.

There needs to be a log entry for this, otherwise this can itself be used
to mask attacks....

--
Ticket URL: <https://www.varnish-cache.org/trac/ticket/1087>
Varnish <https://varnish-cache.org/>
The Varnish HTTP Accelerator

_______________________________________________
varnish-bugs mailing list
varnish-bugs [at] varnish-cache
https://www.varnish-cache.org/lists/mailman/listinfo/varnish-bugs

Subject User Time
#1087: Requests dropped due to long headers are invisible varnish-bugs at varnish-cache Jan 26, 2012, 4:19 AM
    Re: #1087: Requests dropped due to long headers are invisible varnish-bugs at varnish-cache Feb 22, 2012, 8:06 AM
    Re: #1087: Requests dropped due to long headers are invisible varnish-bugs at varnish-cache Feb 23, 2012, 2:45 AM

  Index | Next | Previous | View Flat
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.