OT: Rapid Reset attacks on HTTP/2
    Jeffrey Walton 
    noloader at gmail.com
       
    Tue Oct 10 18:50:37 UTC 2023
    
    
  
Hi Everyone,
This just made my radar:
<https://thehackernews.com/2023/10/http2-rapid-reset-zero-day.html>.
>From the article:
    F5, in an independent advisory of its own, said the attack impacts the
    NGINX HTTP/2 module and has urged its customers to update their NGINX
    configuration to limit the number of concurrent streams to a default of
    128 and persist HTTP connections for up to 1000 requests.
Jeff
    
    
More information about the nginx
mailing list