http2: Flip the upstream H2 frame flood and abuse checks to ON by default#14443
Merged
yanavlasov merged 9 commits intoenvoyproxy:masterfrom Jan 14, 2021
Merged
http2: Flip the upstream H2 frame flood and abuse checks to ON by default#14443yanavlasov merged 9 commits intoenvoyproxy:masterfrom
yanavlasov merged 9 commits intoenvoyproxy:masterfrom
Conversation
Loading
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Additional Description:
This PR switches the upstream flood and abuse checks to on by default. It can be disabled through a runtime flag.
Risk Level: High (upstream H2 codec behavior)
Testing: Unit, Integration tests
Docs Changes: N/A
Release Notes: Yes
Platform Specific Features: N/A
Runtime guard: envoy.reloadable_features.upstream_http2_flood_checks
Fixes #12281
Signed-off-by: Yan Avlasov [email protected]