Skip to content

Security: Resource starvation through slow client connections to mirrored repositories #72

@Bethibande

Description

@Bethibande

Issue

  • The mirror implementation of the MavenRepository and OCIRepository classes pipes the data when storing it.
  • The main stream is handed to the backend to store the resulting file, if enabled.
  • The client connection will be the sink. That's the issue: If the client connection is slow, it'll cause the main stream to buffer.
  • We may need some sort of timeout/minimum client connection speed to ensure clients can't easily starve the server of resources

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions