anshulmgupta opened a new pull request, #2964:
URL: https://github.com/apache/thrift/pull/2964

   <!-- Explain the changes in the pull request below: -->
   The thrift server is getting killed when using security port scan tools in 
the hosts running the thrift server. These tools try to connect to the open 
ports by sending requests to the ports, and the error can happen when accept 
syscall call, waiting for an incoming connection, or receiving a connection 
that terminates before the accept process completes, hence killing the thrift 
server. This can cause potential DoS (Denial of service) attacks on the 
applications running the thrift server, causing them to become unresponsive. 
Sometimes, even just running the netcat (nc -zvvvw2 <hostname> <thrift server 
port>) on the port remote can kill the entire thrift server, making it 
unresponsive. 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@thrift.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to