search

vanadium / issues

Vanadium issue tracker
1 stars 1 forks source link

DOS protection for mounttable #580

Open caprita opened 9 years ago

caprita commented 9 years ago

As demonstrated in incident https://docs.google.com/document/d/17dWVTOqu9RAohxnIrdCCKohOGjPG6-dd2EgpTeFLQwk/edit#, mounttable is susceptible to DOS by asking it to do expensive globs.

Mounttable ought to have some protection at least against accidental DOS by bounding the amount of work done on behalf of any RPC

caprita commented 9 years ago

We can also consider bounding the number of nodes a given user is allowed to create in the global mounttable

presotto commented 9 years ago

That already exists, i.e., number of nodes a user can create.

On Tue, Jun 30, 2015 at 9:58 AM, bogdan caprita notifications@github.com wrote:

We can also consider bounding the number of nodes a given user is allowed to create in the global mounttable

— Reply to this email directly or view it on GitHub https://github.com/vanadium/issues/issues/580#issuecomment-117255779.

caprita commented 9 years ago

what are the limits today? And is it per blessing?

Also, note that the flood of names under users/vanadium.bot@gmail.com/apps/chat/public was due to an accumulation of acls, rather than mount points. So most of the mount points were gone, but the acls lived on forever. Does the limit apply to nodes that just have acls but no mounts?