mirror of
https://github.com/vee1e/subidx.git
synced 2026-09-03 02:37:17 +00:00
Every distinct client key allocated a bucket retained for up to 24 hours, and keys are cheap to mint at line rate (spoofed XFF values, IPv6 /64s), so a remote attacker could grow the map until the process ran out of memory. Shards now evict expired buckets and then arbitrary victims once a shard exceeds 4096 buckets. |
||
|---|---|---|
| .. | ||
| helpers_test.go | ||
| limiter.go | ||
| limiter_test.go | ||
| server.go | ||
| server_test.go | ||