Skip to content

hyper_util: expose a timeout on ReadVersion in server::conn::auto #3962

@howardjohn

Description

@howardjohn

Is your feature request related to a problem? Please describe.
When serving h1 directly, hyper currently has a time on reading the initial headers (see #3178 for context/the PR). However, with auto there is no timer on the ReadVersion, which makes this timer unreachable until the ReadVersion is complete.

The impact of this is that the user can open up a connection indefinitely without sending any data which is a DoS vector.

Describe the solution you'd like
An (opt in, perhaps?) timeout on server::conn::auto

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

Metadata

Metadata

Assignees

No one assigned

    Labels

    A-serverArea: server.C-featureCategory: feature. This is adding a new feature.K-hyper-utilCrate: hyper-util

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions