[Varnish] #1087: Requests dropped due to long headers are invisible

Varnish varnish-bugs at varnish-cache.org
Thu Jan 26 13:19:03 CET 2012


#1087: Requests dropped due to long headers are invisible
----------------------+-----------------------------------------------------
 Reporter:  kristian  |       Owner:       
     Type:  defect    |      Status:  new  
 Priority:  normal    |   Milestone:       
Component:  varnishd  |     Version:  trunk
 Severity:  normal    |    Keywords:       
----------------------+-----------------------------------------------------
 Currently Varnish will not be very specific if a connection is dropped due
 to overly long headers. It's assumed to be an attack or otherwise
 malicious.

 This makes it close to impossible for sysadmins to determine that it's
 happening and why.

 There needs to be a log entry for this, otherwise this can itself be used
 to mask attacks....

-- 
Ticket URL: <https://www.varnish-cache.org/trac/ticket/1087>
Varnish <https://varnish-cache.org/>
The Varnish HTTP Accelerator




More information about the varnish-bugs mailing list