[tor-bugs] #24902 [Core Tor/Tor]: Denial of Service mitigation subsystem

[Tor Bug Tracker & Wiki]

#24902: Denial of Service mitigation subsystem
-------------------------------------------------+-------------------------
 Reporter:  dgoulet                              |          Owner:  dgoulet
     Type:  enhancement                          |         Status:
                                                 |  needs_review
 Priority:  Very High                            |      Milestone:  Tor:
                                                 |  0.3.3.x-final
Component:  Core Tor/Tor                         |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  ddos, tor-relay, review-group-30,    |  Actual Points:
  029-backport, 031-backport, 032-backport,      |
  review-group-31                                |
Parent ID:                                       |         Points:
 Reviewer:  arma                                 |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by teor):

 Code review:

 "dos.h" already exists in some Windows environments. We might want to pick
 another name.

 The dos_*refuse_single_hop_client functions and variables are confusing.
 They only apply to v2 rendezvous, but they are named like they apply to
 all clients. Please add the word "rend".

 Should we implement this defence for v3 rendezvous as well?
 (We have a separate ticket for single hop HSDir and intro.)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/24902#comment:50>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online