search

valyala / fasthttp

Fast HTTP package for Go. Tuned for high performance. Zero memory allocations in hot paths. Up to 10x faster than net/http
MIT License
21.94k stars 1.76k forks source link

Fix rapid reset of fasthttp is vulnerable #1635

Closed PaulDotSH closed 1 year ago

PaulDotSH commented 1 year ago

Fix rapid reset of fasthttp is vulnerable

erikdubbelboer commented 1 year ago

Can you explain?

pablolagos commented 1 year ago

Hi, as fasthttp is not native HTTP2 compatible, it is not vulnerable to reset attacks. Those attacks target HTTP2 servers only.