-
Bug
-
Resolution: Done
-
Major
-
None
-
None
-
False
-
-
False
-
-
Environment:
JBCS Apache 2.4.57 SP6
mod_http2, event MPM
Issue:
If one keeps sending HTTP/2 requests continuously over the same TCP connection, the RSS of the worker process will never stop increasing. This behavior might be misused for DoS attack.
# h2load -c 1 -m 1 -n 3000000 https://localhost/hello.html # for ((;;)); do date --iso-8601=seconds; ps aux | grep httpd | grep -v grep; sleep 1; done 2025-03-13T07:24:27+00:00 root 46673 0.0 0.2 299408 15780 ? Ss 07:24 0:00 /usr/local/httpd/jbcs-httpd24-2.4/httpd/sbin/httpd -f /usr/local/httpd/jbcs-httpd24-2.4/httpd/conf/httpd.conf -E /usr/local/httpd/jbcs-httpd24-2.4/httpd/logs/httpd.log -k start apache 46674 0.0 0.1 301464 10788 ? S 07:24 0:00 /usr/local/httpd/jbcs-httpd24-2.4/httpd/sbin/httpd -f /usr/local/httpd/jbcs-httpd24-2.4/httpd/conf/httpd.conf -E /usr/local/httpd/jbcs-httpd24-2.4/httpd/logs/httpd.log -k start apache 46675 0.0 0.1 829668 13004 ? Sl 07:24 0:00 /usr/local/httpd/jbcs-httpd24-2.4/httpd/sbin/httpd -f /usr/local/httpd/jbcs-httpd24-2.4/httpd/conf/httpd.conf -E /usr/local/httpd/jbcs-httpd24-2.4/httpd/logs/httpd.log -k start apache 46676 0.0 0.1 829672 13000 ? Sl 07:24 0:00 /usr/local/httpd/jbcs-httpd24-2.4/httpd/sbin/httpd -f /usr/local/httpd/jbcs-httpd24-2.4/httpd/conf/httpd.conf -E /usr/local/httpd/jbcs-httpd24-2.4/httpd/logs/httpd.log -k start apache 46677 0.0 0.1 829668 13004 ? Sl 07:24 0:00 /usr/local/httpd/jbcs-httpd24-2.4/httpd/sbin/httpd -f /usr/local/httpd/jbcs-httpd24-2.4/httpd/conf/httpd.conf -E /usr/local/httpd/jbcs-httpd24-2.4/httpd/logs/httpd.log -k start ... apache 46677 81.3 3.5 1087116 273220 ? Sl 07:24 5:29 /usr/local/httpd/jbcs-httpd24-2.4/httpd/sbin/httpd -f /usr/local/httpd/jbcs-httpd24-2.4/httpd/conf/httpd.conf -E /usr/local/httpd/jbcs-httpd24-2.4/httpd/logs/httpd.log -k start ... apache 46677 81.6 4.5 1164952 351140 ? Sl 07:24 7:08 /usr/local/httpd/jbcs-httpd24-2.4/httpd/sbin/httpd -f /usr/local/httpd/jbcs-httpd24-2.4/httpd/conf/httpd.conf -E /usr/local/httpd/jbcs-httpd24-2.4/httpd/logs/httpd.log -k start ... apache 46677 82.0 7.1 1365060 551056 ? Sl 07:24 11:25 /usr/local/httpd/jbcs-httpd24-2.4/httpd/sbin/httpd -f /usr/local/httpd/jbcs-httpd24-2.4/httpd/conf/httpd.conf -E /usr/local/httpd/jbcs-httpd24-2.4/httpd/logs/httpd.log -k start
