Maybe a bug in Nginx 0.6.30 x86_64

[François Battail]

Igor Sysoev <is at ...> writes:

> Because after sending response and before going to keepalive state
> nginx tests if there is data to read. And if data is, nginx goes to a next
> request: ngx_http_keepalive_handler() calls ngx_http_init_request().

OK, thank you, it's clear now. But I think there's still an issue allowing
remote attacks (when 10 Gb network cards will be the norm); you say that there
were two solutions but just told us about limiting the number of keepalive, may
I ask you what is the second option?

Thank you for your time and best regards.