dos: Apply circuit creation defenses if circ max queue cell reached

This adds two consensus parameters to control the outbound max circuit
queue cell size limit and how many times it is allowed to reach that
limit for a single client IP.

Closes #40680

Signed-off-by: David Goulet <dgoulet@torproject.org>
This commit is contained in:
David Goulet
2022-10-17 11:34:57 -04:00
parent e86833ade6
commit a2c034d8f5
5 changed files with 143 additions and 7 deletions
+6
View File
@@ -0,0 +1,6 @@
o Minor feature (relay, DoS):
- Apply circuit creation anti-DoS defenses if the outbound circuit max cell
queue size is reached too many times. This introduces two new consensus
parameters to control the queue size limit and number of times allowed to
go over that limit. Close ticket 40680.