Details
-
Technical task
-
Resolution: Unresolved
-
Not Evaluated
-
None
-
None
-
None
-
Foundation Sprint 113, Foundation Sprint 114, Foundation Sprint 115, Foundation Sprint 116, Foundation Sprint 117, Foundation Sprint 118, Foundation Sprint 119, Foundation Sprint 120
Description
As the Qt network code might already have accepted incoming connection, and buffered incoming data, handling flooding or DDoS in the HTTP server might be too late.
Evaluate the available APIs in QtNetwork code to see what functionality might be missing in order to allow effective protection of a server process. For example
- defining a blacklist/whitelist of IP addresses
- rate limiting (slow down brute-force connection attempts)