Skip to content

Add HTTP/2 control frame overhead protection - #741

Merged
arturobernalg merged 1 commit into
apache:masterfrom
arturobernalg:h2-control-frame-overhead-protection
Nov 8, 2026
Merged

arturobernalg merged 1 commit into
apache:masterfrom
arturobernalg:h2-control-frame-overhead-protection

Conversation

@arturobernalg

Copy link
Copy Markdown
Member

Add per-connection overhead protection against excessive HTTP/2 PING and SETTINGS frames.

The implementation uses lightweight accounting in the HTTP/2 layer and raises ENHANCE_YOUR_CALM when the limit is exceeded.

@arturobernalg
arturobernalg requested a review from ok2c November 7, 2026 16:55
@arturobernalg
arturobernalg force-pushed the h2-control-frame-overhead-protection branch from 67798b2 to 3105a4a Compare November 7, 2026 16:58
Limit excessive PING and SETTINGS frames using per-connection
rate limiting. Reject excessive traffic with ENHANCE_YOUR_CALM.
@arturobernalg
arturobernalg force-pushed the h2-control-frame-overhead-protection branch from 74bc491 to 6e87072 Compare November 8, 2026 11:08
@arturobernalg
arturobernalg requested a review from ok2c November 8, 2026 11:17
@arturobernalg
arturobernalg merged commit 428c959 into apache:master Nov 8, 2026
12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants