Details
-
Task
-
Status: Open (View Workflow)
-
Minor
-
Resolution: Unresolved
-
None
-
None
-
None
Description
A client repeatedly trying to connect with a nonexisting default database given can lead to a denial-of-service effect.
As the client authenticates correctly, and only fails when trying to use the database given on connect, this is not caught by the server mechanism that blocks out hosts after too many failed connection attempts, as the actual connect and authentication phase were completed successfully.
Per-user limits don't help here either, as for this the actual user needs to be known first, and that already takes most of the connect time and effort in this case.
Being able to limit the number of connections per time period on a per host basis could help against misbehaved client hosts of this kind
Attachments
Issue Links
- relates to
-
MDEV-29209 Implement connection response delay after a number of failed login attempts
- Stalled
-
MXS-2414 Throttle connection attempts
- Closed