search

jcktej / jdiameter

Automatically exported from code.google.com/p/jdiameter
0 stars 0 forks source link

Diameter Stack: Limit/Clean Peer Table #3

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
When a peer connects to the mobicents stack, it is added to the Peer Table. 
When disconnected the entry is still present since it may be a temporary 
disconnection and data associated (such as statistics) is to be kept.

But this can represent a potential security flaw against DoS attacks, by 
connecting from different peers, to overload the peer table, causing every 
lookup to take longer and eventually end in an Out of Memory error.

Possible solutions:
1. Limit the size to a specific value and clean disconnected entries once it is 
reached;
2. Have a periodic task to scan the peer table for disconnected entries 
(eventually looking for last access time)

Original issue reported on code.google.com by brainslog on 28 Aug 2012 at 12:41

GoogleCodeExporter commented 9 years ago 
This issue was updated by revision abe58aff2b03.

Implemented option 1, with hardcoded size of 10000 peers.

Original comment by brainslog on 10 Jan 2013 at 4:04