Adding ReadHeaderTimeout to prevent Slowloris DoS (#30)

fullstorydev · May 22, 2023 · 3e6d531 · 3e6d531
1 parent 54fcb22
commit 3e6d531
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 3 deletions.
diff --git a/relay/service.go b/relay/service.go
@@ -4,6 +4,7 @@ import (
 	"fmt"
 	"net"
 	"net/http"
+	"time"
 
 	"github.com/fullstorydev/relay-core/relay/traffic"
 )
@@ -75,8 +76,9 @@ func (service *Service) Port() int {
 func (service *Service) Start(host string, port int) error {
 	address := fmt.Sprintf("%v:%v", host, port)
 	server := &http.Server{
-		Addr:    address,
-		Handler: service.mux,
+		Addr:              address,
+		Handler:           service.mux,
+		ReadHeaderTimeout: 2 * time.Second,
 	}
 	listener, err := net.Listen("tcp", address)
 	if err != nil {

diff --git a/relay/version/version.go b/relay/version/version.go
@@ -1,3 +1,3 @@
 package version
 
-const RelayRelease = "v0.3.0" // TODO set this from tags automatically during git commit
+const RelayRelease = "v0.3.1" // TODO set this from tags automatically during git commit