aboutsummaryrefslogtreecommitdiffstats
path: root/test
diff options
context:
space:
mode:
authorLoïc Hoguin <[email protected]>2020-03-29 13:51:21 +0200
committerLoïc Hoguin <[email protected]>2020-03-29 13:51:21 +0200
commit6ad842a742915066d319f307a0f60cd8df15598b (patch)
treec938e1f0ce21b1dfc1c3cf08852efdab7b27304c /test
parentf8e94c3315dab3ae1d6dbb4e6785034f79eb04fb (diff)
downloadcowboy-6ad842a742915066d319f307a0f60cd8df15598b.tar.gz
cowboy-6ad842a742915066d319f307a0f60cd8df15598b.tar.bz2
cowboy-6ad842a742915066d319f307a0f60cd8df15598b.zip
Increase the default max_received_frame_rate
Allow 10000 frames every 10 seconds instead of just 1000, as the limit was too quickly reached in some deployments.
Diffstat (limited to 'test')
-rw-r--r--test/security_SUITE.erl12
1 files changed, 6 insertions, 6 deletions
diff --git a/test/security_SUITE.erl b/test/security_SUITE.erl
index 5aeded9..0e72d74 100644
--- a/test/security_SUITE.erl
+++ b/test/security_SUITE.erl
@@ -116,7 +116,7 @@ http2_empty_frame_flooding_data(Config) ->
{<<":path">>, <<"/echo/read_body">>}
]),
ok = gen_tcp:send(Socket, cow_http2:headers(1, nofin, HeadersBlock)),
- _ = [gen_tcp:send(Socket, cow_http2:data(1, nofin, <<>>)) || _ <- lists:seq(1, 2000)],
+ _ = [gen_tcp:send(Socket, cow_http2:data(1, nofin, <<>>)) || _ <- lists:seq(1, 20000)],
%% When Cowboy detects a flood it must close the connection.
%% We skip WINDOW_UPDATE frames sent when Cowboy starts to read the body.
case gen_tcp:recv(Socket, 43, 6000) of
@@ -133,7 +133,7 @@ http2_empty_frame_flooding_headers_continuation(Config) ->
{ok, Socket} = rfc7540_SUITE:do_handshake(Config),
%% Send many empty HEADERS/CONTINUATION frames before the headers.
ok = gen_tcp:send(Socket, <<0:24, 1:8, 0:9, 1:31>>),
- _ = [gen_tcp:send(Socket, <<0:24, 9:8, 0:9, 1:31>>) || _ <- lists:seq(1, 2000)],
+ _ = [gen_tcp:send(Socket, <<0:24, 9:8, 0:9, 1:31>>) || _ <- lists:seq(1, 20000)],
{HeadersBlock, _} = cow_hpack:encode([
{<<":method">>, <<"POST">>},
{<<":scheme">>, <<"http">>},
@@ -181,7 +181,7 @@ http2_ping_flood(Config) ->
doc("Confirm that Cowboy detects PING floods. (CVE-2019-9512)"),
{ok, Socket} = rfc7540_SUITE:do_handshake(Config),
%% Flood the server with PING frames.
- _ = [gen_tcp:send(Socket, cow_http2:ping(0)) || _ <- lists:seq(1, 2000)],
+ _ = [gen_tcp:send(Socket, cow_http2:ping(0)) || _ <- lists:seq(1, 20000)],
%% Receive a number of PING ACK frames in return, following by the closing of the connection.
try
[case gen_tcp:recv(Socket, 17, 6000) of
@@ -190,7 +190,7 @@ http2_ping_flood(Config) ->
%% We also accept the connection being closed immediately,
%% which may happen because we send the GOAWAY right before closing.
{error, closed} -> throw(goaway)
- end || _ <- lists:seq(1, 2000)],
+ end || _ <- lists:seq(1, 20000)],
error(flood_successful)
catch throw:goaway ->
ok
@@ -231,7 +231,7 @@ http2_settings_flood(Config) ->
doc("Confirm that Cowboy detects SETTINGS floods. (CVE-2019-9515)"),
{ok, Socket} = rfc7540_SUITE:do_handshake(Config),
%% Flood the server with empty SETTINGS frames.
- _ = [gen_tcp:send(Socket, cow_http2:settings(#{})) || _ <- lists:seq(1, 2000)],
+ _ = [gen_tcp:send(Socket, cow_http2:settings(#{})) || _ <- lists:seq(1, 20000)],
%% Receive a number of SETTINGS ACK frames in return, following by the closing of the connection.
try
[case gen_tcp:recv(Socket, 9, 6000) of
@@ -243,7 +243,7 @@ http2_settings_flood(Config) ->
%% which may happen because we send the GOAWAY right before closing.
{error, closed} ->
throw(goaway)
- end || _ <- lists:seq(1, 2000)],
+ end || _ <- lists:seq(1, 20000)],
error(flood_successful)
catch throw:goaway ->
ok