Received: from malur.postgresql.org ([2a02:16a8:dc51::56]) by arkaria.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1fjoLr-00052Q-Ht for pgsql-hackers@arkaria.postgresql.org; Sun, 29 Jul 2018 16:15:23 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.89) (envelope-from ) id 1fjoLp-0002kD-PS for pgsql-hackers@arkaria.postgresql.org; Sun, 29 Jul 2018 16:15:21 +0000 Received: from makus.postgresql.org ([2001:4800:1501:1::229]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1fjoLp-0002jk-Ct for pgsql-hackers@lists.postgresql.org; Sun, 29 Jul 2018 16:15:21 +0000 Received: from smtp-fw-33001.amazon.com ([207.171.190.10]) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1fjoLm-0005VO-Ec for pgsql-hackers@postgresql.org; Sun, 29 Jul 2018 16:15:19 +0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.com; i=@amazon.com; q=dns/txt; s=amazon201209; t=1532880918; x=1564416918; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=ttRHrvq5gsyj24il9tjHg9jXk+BYzVrYRVafYYW+ECA=; b=qQrLX/IvbnB0B8UVp7hUHGM0hmfGXkjpdqTBPoPztZHBS5slDhtBC0NK pEtXuO1wTQgZBmUpH5+rvnShiunDYOqIRtm2ech3E8u++VyXrMytfmvHy Byk5zBGa363YOI5YLHbZ5/p9NLOpT+bD0on0bP+nhsCoXQki4mB4LWC5P E=; X-IronPort-AV: E=Sophos;i="5.51,419,1526342400"; d="scan'208";a="746874453" Received: from sea3-co-svc-lb6-vlan2.sea.amazon.com (HELO email-inbound-relay-2a-7c3c5f85.us-west-2.amazon.com) ([10.47.22.34]) by smtp-border-fw-out-33001.sea14.amazon.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 29 Jul 2018 16:12:07 +0000 Received: from EX13MTAUWC001.ant.amazon.com (pdx1-ws-svc-p6-lb9-vlan3.pdx.amazon.com [10.236.137.198]) by email-inbound-relay-2a-7c3c5f85.us-west-2.amazon.com (8.14.7/8.14.7) with ESMTP id w6TGBdLX012908 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Sun, 29 Jul 2018 16:11:39 GMT Received: from EX13D18UWC002.ant.amazon.com (10.43.162.88) by EX13MTAUWC001.ant.amazon.com (10.43.162.135) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Sun, 29 Jul 2018 16:11:39 +0000 Received: from EX13D03UWC004.ant.amazon.com (10.43.162.49) by EX13D18UWC002.ant.amazon.com (10.43.162.88) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Sun, 29 Jul 2018 16:11:39 +0000 Received: from EX13D03UWC004.ant.amazon.com ([10.43.162.49]) by EX13D03UWC004.ant.amazon.com ([10.43.162.49]) with mapi id 15.00.1367.000; Sun, 29 Jul 2018 16:11:39 +0000 From: "Bossart, Nathan" To: Michael Paquier CC: Kyotaro HORIGUCHI , "andres@anarazel.de" , "pgsql-hackers@lists.postgresql.org" , "robertmhaas@gmail.com" , "Schneider, Jeremy" , "pgsql-hackers@postgresql.org" , "lalbin@scharp.org" Subject: Re: BUG #15182: Canceling authentication due to timeout aka Denial of Service Attack Thread-Topic: BUG #15182: Canceling authentication due to timeout aka Denial of Service Attack Thread-Index: AQHT4MO6juQBhpg+30y8ojS4Bv14mqSXq90AgAXGhICAANWagIAAARKAgAAJBQCAAAB8AIADLbUAgABO/YCAALFFgP//1vKAgACK04CAABJXAIAACs4AgABazYCAAPLwAIACSyGA Date: Sun, 29 Jul 2018 16:11:38 +0000 Message-ID: <6D3CBDB6-C358-49F0-8D00-32E58AD2D3D3@amazon.com> References: <20180726204127.GA1754@paquier.xyz> <3D4F2733-92AE-4B74-8912-3C611B027721@amazon.com> <20180727023123.GE1754@paquier.xyz> <20180727.123702.77822416.horiguchi.kyotaro@lab.ntt.co.jp> <20180727041542.GH1754@paquier.xyz> <62728D88-85A0-4A9A-A4F8-67D96C1179E0@amazon.com> <20180728001012.GC1882@paquier.xyz> In-Reply-To: <20180728001012.GC1882@paquier.xyz> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.43.162.194] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 Precedence: Bulk List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk T24gNy8yNy8xOCwgNzoxMCBQTSwgIk1pY2hhZWwgUGFxdWllciIgPG1pY2hhZWxAcGFxdWllci54 eXo+IHdyb3RlOg0KPiBObyBwcm9ibGVtLiAgSWYgdGhlcmUgYXJlIG5vIG9iamVjdGlvbnMsIEkg YW0gZ29pbmcgdG8gZml4IHRoZSBSRUlOREVYDQo+IGlzc3VlIGZpcnN0IGFuZCBiYWNrLXBhdGNo LiAgSXRzIHBhdGNoIGlzIHRoZSBsZWFzdCBpbnZhc2l2ZSBvZiB0aGUNCj4gc2V0Lg0KDQpUaGlz IHNlZW1zIGxpa2UgYSByZWFzb25hYmxlIHBsYWNlIHRvIHN0YXJ0LiAgSSB0b29rIGEgY2xvc2Vy IGxvb2sgYXQNCjAwMDMuDQoNCisJCS8qDQorCQkgKiBXZSBhbGxvdyB0aGUgdXNlciB0byByZWlu ZGV4IGEgdGFibGUgaWYgaGUgaXMgc3VwZXJ1c2VyLCB0aGUgdGFibGUNCisJCSAqIG93bmVyLCBv ciB0aGUgZGF0YWJhc2Ugb3duZXIgKGJ1dCBpbiB0aGUgbGF0dGVyIGNhc2UsIG9ubHkgaWYgaXQn cyBub3QNCisJCSAqIGEgc2hhcmVkIHJlbGF0aW9uKS4NCisJCSAqLw0KKwkJaWYgKCEocGdfY2xh c3Nfb3duZXJjaGVjayhyZWxpZCwgR2V0VXNlcklkKCkpIHx8DQorCQkJICAocGdfZGF0YWJhc2Vf b3duZXJjaGVjayhNeURhdGFiYXNlSWQsIEdldFVzZXJJZCgpKSAmJg0KKwkJCSAgICFjbGFzc3R1 cGxlLT5yZWxpc3NoYXJlZCkpKQ0KKwkJCWNvbnRpbnVlOw0KDQpUaGlzIGlzIGFkZGVkIHRvIFJl aW5kZXhNdWx0aXBsZVRhYmxlcygpLCB3aGljaCBpcyB1c2VkIGZvciBSRUlOREVYDQpTQ0hFTUEs IFJFSU5ERVggU1lTVEVNLCBhbmQgUkVJTkRFWCBEQVRBQkFTRS4gIFByZXNlbnRseSwgUkVJTkRF WA0KU0NIRU1BIHJlcXVpcmVzIGJlaW5nIHRoZSBvd25lciBvZiB0aGUgc2NoZW1hLCBhbmQgUkVJ TkRFWCBTWVNURU0gYW5kDQpSRUlOREVYIERBVEFCQVNFIHJlcXVpcmUgYmVpbmcgdGhlIG93bmVy IG9mIHRoZSBkYXRhYmFzZS4gIFNvLCBpZiBhDQpyb2xlIGlzIGFuIG93bmVyIG9mIGEgZGF0YWJh c2Ugb3IgdGhlIHBnX2NhdGFsb2cgc2NoZW1hLCB0aGV5IGFyZSBhYmxlDQp0byByZWluZGV4IHNo YXJlZCBjYXRhbG9ncyBsaWtlIHBnX2F1dGhpZC4NCg0KVGhpcyBwYXRjaCBjaGFuZ2VzIHRoaW5n cyBzbyB0aGF0IG9ubHkgc3VwZXJ1c2VycyBvciB0aGUgb3duZXIgb2YgdGhlDQp0YWJsZSBjYW4g cmVpbmRleCBzaGFyZWQgcmVsYXRpb25zLiAgVGhpcyB3b3JrcyBhcyBleHBlY3RlZCBmb3INClJF SU5ERVggU1lTVEVNIGFuZCBSRUlOREVYIERBVEFCQVNFLCBidXQgSSB0aGluayB0aGVyZSBpcyBh IHByb2JsZW0NCmZvciBSRUlOREVYIFNDSEVNQS4gIElmIHRoZSB1c2VyIGlzIG5vdCB0aGUgb3du ZXIgb2YgdGhlIGRhdGFiYXNlIGJ1dA0KaXMgdGhlIG93bmVyIG9mIHRoZSBzY2hlbWEsIHRoZXkg d2lsbCBub3QgYmUgYWJsZSB0byB1c2UgUkVJTkRFWA0KU0NIRU1BIHRvIHJlaW5kZXggYW55IHRh YmxlcyB0aGF0IHRoZXkgZG8gbm90IG93bi4gIFRvIGZpeCB0aGlzLCB3ZQ0Kd2lsbCBsaWtlbHkg bmVlZCB0byB1c2UgcGdfbmFtZXNwYWNlX293bmVyY2hlY2soKSBpbnN0ZWFkIG9mDQpwZ19kYXRh YmFzZV9vd25lcmNoZWNrKCkgZm9yIHRoZSBSRUlOREVYX09CSkVDVF9TQ0hFTUEgY2FzZS4NCg0K SSBhbHNvIG5vdGljZWQgdGhhdCB0aGlzIHBhdGNoIGNhdXNlcyBzaGFyZWQgcmVsYXRpb25zIHRv IGJlIHNraXBwZWQNCnNpbGVudGx5LiAgUGVyaGFwcyB3ZSBzaG91bGQgZW1pdCBhIFdBUk5JTkcg b3IgREVCVUcgbWVzc2FnZSB3aGVuIHRoaXMNCmhhcHBlbnMsIGF0IGxlYXN0IGZvciBSRUlOREVY T1BUX1ZFUkJPU0UuDQoNCiAgICBSZWluZGV4aW5nIGEgc2luZ2xlIGluZGV4IG9yIHRhYmxlIHJl cXVpcmVzIGJlaW5nIHRoZSBvd25lciBvZiB0aGF0DQogICAgaW5kZXggb3IgdGFibGUuICBSZWlu ZGV4aW5nIGEgZGF0YWJhc2UgcmVxdWlyZXMgYmVpbmcgdGhlIG93bmVyIG9mDQogICAgdGhlIGRh dGFiYXNlIChub3RlIHRoYXQgdGhlIG93bmVyIGNhbiB0aGVyZWZvcmUgcmVidWlsZCBpbmRleGVz IG9mDQotICAgdGFibGVzIG93bmVkIGJ5IG90aGVyIHVzZXJzKS4gIE9mIGNvdXJzZSwgc3VwZXJ1 c2VycyBjYW4gYWx3YXlzDQorICAgdGFibGVzIG93bmVkIGJ5IG90aGVyIHVzZXJzKS4gIFJlaW5k ZXhpbmcgYSBzaGFyZWQgY2F0YWxvZyByZXF1aXJlcw0KKyAgIGJlaW5nIHRoZSBvd25lciBvZiB0 aGF0IHNoYXJlZCBjYXRhbG9nLiAgT2YgY291cnNlLCBzdXBlcnVzZXJzIGNhbiBhbHdheXMNCiAg ICByZWluZGV4IGFueXRoaW5nLg0KDQpJIG5vdGljZWQgdGhhdCB0aGVyZSBpcyBubyBtZW50aW9u IHRoYXQgdGhlIG93bmVyIG9mIGEgc2NoZW1hIGNhbiBkbw0KUkVJTkRFWCBTQ0hFTUEsIHdoaWNo IHNlZW1zIGltcG9ydGFudCB0byBub3RlLiAgQWxzbywgdGhlIHByb3Bvc2VkDQp3b3JkaW5nIG1p Z2h0IHNlZW0gc2xpZ2h0bHkgYW1iaWd1b3VzIGZvciB0aGUgUkVJTkRFWCBEQVRBQkFTRSBjYXNl Lg0KSXQgbWlnaHQgYmUgY2xlYXJlciB0byBzYXkgc29tZXRoaW5nIGxpa2UgdGhlIGZvbGxvd2lu ZzoNCg0KICAgICAgICBSZWluZGV4aW5nIGEgc2luZ2xlIGluZGV4IG9yIHRhYmxlIHJlcXVpcmVz IGJlaW5nIHRoZSBvd25lciBvZg0KICAgICAgICB0aGF0IGluZGV4IG9mIHRhYmxlLiAgUkVJTkRF WCBEQVRBQkFTRSBhbmQgUkVJTkRFWCBTWVNURU0NCiAgICAgICAgcmVxdWlyZSBiZWluZyB0aGUg b3duZXIgb2YgdGhlIGRhdGFiYXNlLCBhbmQgUkVJTkRFWCBTQ0hFTUENCiAgICAgICAgcmVxdWly ZXMgYmVpbmcgdGhlIG93bmVyIG9mIHRoZSBzY2hlbWEgKG5vdGUgdGhhdCB0aGUgdXNlciBjYW4N CiAgICAgICAgdGhlcmVmb3JlIHJlYnVpbGQgaW5kZXhlcyBvZiB0YWJsZXMgb3duZWQgYnkgb3Ro ZXIgdXNlcnMpLg0KICAgICAgICBSZWluZGV4aW5nIGEgc2hhcmVkIGNhdGFsb2cgcmVxdWlyZXMg YmVpbmcgdGhlIG93bmVyIG9mIHRoZQ0KICAgICAgICBzaGFyZWQgY2F0YWxvZywgZXZlbiBpZiB0 aGUgdXNlciBpcyB0aGUgb3duZXIgb2YgdGhlIHNwZWNpZmllZA0KICAgICAgICBkYXRhYmFzZSBv ciBzY2hlbWEuICBPZiBjb3Vyc2UsIHN1cGVydXNlcnMgY2FuIGFsd2F5cyByZWluZGV4DQogICAg ICAgIGFueXRoaW5nLg0KDQpOYXRoYW4NCg0K