control-port-filter ddos test

[phabricator-migrator]

Information

ID: 565
PHID: PHID-TASK-rgvu6prk7of5doweeruo
Author: Patrick
Status at Migration Time: open
Priority at Migration Time: Normal

Description

! In T448#10490, @HulaHoop wrote:

• a query stress test - bombarding cpfp with a very high volume of valid requests. Does cpfp fail gracefully? How does it cope with a simulated DDoS?

Comments

---

Patrick

2016-11-12 18:37:16 UTC

discussion:
https://mailman.boum.org/pipermail/tails-dev/2016-November/011040.html

conclusion:

I guess we can use T16 for DDOS from external sources.

This ticket an attempt to contain damage by compromised workstations from ddos’ing the control port filter. Even if solved, still Tor could be ddos’ed. So I suggest to defer this ticket for a later release. The we perhaps solve it by using iptables as a limiter.