Details
-
New Feature
-
Status: Closed (View Workflow)
-
Major
-
Resolution: Fixed
-
2.3.4
-
None
Description
A client repeatedly trying to connect with a nonexisting default database given can lead to a denial-of-service effect.
As the client authenticates correctly, and only fails when trying to use the database given on connect, this is not caught by the server mechanism that blocks out hosts after too many failed connection attempts, as the actual connect and authentication phase were completed successfully.
Feature request: provide some kind of throttle mechanism for incoming client connections, similar to query throttling in the Throttle filter, either globally for a given router, or on a per-host basis.
Attachments
Issue Links
- relates to
-
MDEV-19133 Limit / throttle connection attempts
- Open