[tor-bugs] #24902 [Core Tor/Tor]: Denial of Service mitigation subsystem

[Tor Bug Tracker & Wiki]

#24902: Denial of Service mitigation subsystem
-------------------------------------------------+-------------------------
 Reporter:  dgoulet                              |          Owner:  dgoulet
     Type:  enhancement                          |         Status:  closed
 Priority:  Very High                            |      Milestone:  Tor:
                                                 |  0.3.3.x-final
Component:  Core Tor/Tor                         |        Version:
 Severity:  Normal                               |     Resolution:  fixed
 Keywords:  tor-dos, tor-relay, review-          |  Actual Points:
  group-30, 029-backport, 031-backport,          |
  032-backport, review-group-31, SponsorV        |
Parent ID:                                       |         Points:
 Reviewer:  arma                                 |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by arma):

 Replying to [comment:81 cypherpunks]:
 > FWIW, Firefox can open more than 100 connections at once, so it is a
 relatively small threshold.

 Whoever wrote this is quite confused. When Firefox makes 100 stream
 requests to the Tor client, the Tor client then bundles them over a single
 TLS connection to its guard. So that's one connection from Tor, no matter
 how many connections there are from Firefox.

 This is part of why we avoid the word "connection" in most of our
 terminology, because it's so easy to misunderstand which layer of
 connection people are talking about.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/24902#comment:86>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online