subidx/internal/server
lakshit verma 89990ec41f
server: cap rate limiter memory under key-flooding
Every distinct client key allocated a bucket retained for up to 24
hours, and keys are cheap to mint at line rate (spoofed XFF values,
IPv6 /64s), so a remote attacker could grow the map until the process
ran out of memory. Shards now evict expired buckets and then arbitrary
victims once a shard exceeds 4096 buckets.
2026-08-21 21:35:29 +05:30
..
helpers_test.go subidx: CT log tailer and crt.name-compatible subdomain search API 2026-08-21 14:26:32 +05:30
limiter.go server: cap rate limiter memory under key-flooding 2026-08-21 21:35:29 +05:30
limiter_test.go server: cap rate limiter memory under key-flooding 2026-08-21 21:35:29 +05:30
server.go store,server: cap buffered results per search query 2026-08-21 21:34:03 +05:30
server_test.go subidx: CT log tailer and crt.name-compatible subdomain search API 2026-08-21 14:26:32 +05:30