Received: from malur.postgresql.org ([2a02:16a8:dc51::56]) by arkaria.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1fihrE-0006GY-E3 for pgsql-hackers@arkaria.postgresql.org; Thu, 26 Jul 2018 15:07:12 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.89) (envelope-from ) id 1fihrA-0007UD-F0 for pgsql-hackers@arkaria.postgresql.org; Thu, 26 Jul 2018 15:07:08 +0000 Received: from makus.postgresql.org ([2001:4800:1501:1::229]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1fihrA-0007U4-2U for pgsql-hackers@lists.postgresql.org; Thu, 26 Jul 2018 15:07:08 +0000 Received: from smtp-fw-2101.amazon.com ([72.21.196.25]) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1fihr6-0002Af-Ay for pgsql-hackers@postgresql.org; Thu, 26 Jul 2018 15:07:06 +0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.com; i=@amazon.com; q=dns/txt; s=amazon201209; t=1532617624; x=1564153624; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=qmaFpzo8q6IaotstW/Z1j6ec63P6SXbcHPfJ4/vtvlk=; b=fA1KU193TWRKQBUSmSbIDTanxFMhiUmdDJWgmBH5WXQgdPvXV/WnP9B1 QAt44qFVILPWyul88UKzXJ/QaoXGYkbbFb8H/D9eQGaGj0dpnsQXl2fdc tnQkwwIGqYdjJHnBmZj710OQVupRD26mULZ/uzZL2GRfPg0Czw713ieCE k=; X-IronPort-AV: E=Sophos;i="5.51,405,1526342400"; d="scan'208";a="689717962" Received: from iad6-co-svc-p1-lb1-vlan2.amazon.com (HELO email-inbound-relay-1a-715bee71.us-east-1.amazon.com) ([10.124.125.2]) by smtp-border-fw-out-2101.iad2.amazon.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 26 Jul 2018 15:07:02 +0000 Received: from EX13MTAUWC001.ant.amazon.com (iad55-ws-svc-p15-lb9-vlan3.iad.amazon.com [10.40.159.166]) by email-inbound-relay-1a-715bee71.us-east-1.amazon.com (8.14.7/8.14.7) with ESMTP id w6QF6xJP092078 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 26 Jul 2018 15:07:01 GMT Received: from EX13D18UWC004.ant.amazon.com (10.43.162.77) by EX13MTAUWC001.ant.amazon.com (10.43.162.135) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Thu, 26 Jul 2018 15:07:00 +0000 Received: from EX13D03UWC004.ant.amazon.com (10.43.162.49) by EX13D18UWC004.ant.amazon.com (10.43.162.77) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Thu, 26 Jul 2018 15:07:00 +0000 Received: from EX13D03UWC004.ant.amazon.com ([10.43.162.49]) by EX13D03UWC004.ant.amazon.com ([10.43.162.49]) with mapi id 15.00.1367.000; Thu, 26 Jul 2018 15:06:59 +0000 From: "Bossart, Nathan" To: Michael Paquier , Andres Freund CC: "pgsql-hackers@lists.postgresql.org" , Robert Haas , "Schneider, Jeremy" , PostgreSQL-development , "Albin, Lloyd P" Subject: Re: BUG #15182: Canceling authentication due to timeout aka Denial of Service Attack Thread-Topic: BUG #15182: Canceling authentication due to timeout aka Denial of Service Attack Thread-Index: AQHT4MO6juQBhpg+30y8ojS4Bv14mqSXq90AgAXGhICAANWagIAAARKAgAAJBQCAAAB8AIADLbUAgABO/YA= Date: Thu, 26 Jul 2018 15:06:59 +0000 Message-ID: References: <152512087100.19803.12733865831237526317@wrigleys.postgresql.org> <9145334b-9583-124c-012e-7d58039ad417@amazon.com> <20180724041403.GF4035@paquier.xyz> <20180724045010.GA4736@paquier.xyz> <20180726052415.GC3927@paquier.xyz> In-Reply-To: <20180726052415.GC3927@paquier.xyz> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.43.162.50] Content-Type: text/plain; charset="utf-8" Content-ID: <30B97A6C230EB5428BA76D0CC99343F2@amazon.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk SSB0b29rIGEgbG9vayBhdCAwMDAxLg0KDQpPbiA3LzI2LzE4LCAxMjoyNCBBTSwgIk1pY2hhZWwg UGFxdWllciIgPG1pY2hhZWxAcGFxdWllci54eXo+IHdyb3RlOg0KPiAxKSAwMDAxIGRvZXMgdGhl IHdvcmsgZm9yIFRSVU5DQVRFLCBidXQgdXNpbmcgUmFuZ2VWYXJHZXRSZWxpZEV4dGVuZGVkDQo+ IHdpdGggYSBjdXN0b20gY2FsbGJhY2sgYmFzZWQgb24gdGhlIGV4aXN0aW5nIHRydW5jYXRlX2No ZWNrX3JlbCgpLiAgSQ0KPiBoYWQgdG8gc3BsaXQgdGhlIHNlc3Npb24tbGV2ZWwgY2hlY2tzIGlu dG8gYSBzZXBhcmF0ZSByb3V0aW5lIGFzIG5vDQo+IFJlbGF0aW9uIGlzIGF2YWlsYWJsZSwgYnV0 IHRoYXQgZmluaXNoZXMgYnkgYmVpbmcgYSBuZWF0IHJlc3VsdCB3aXRob3V0DQo+IGNoYW5naW5n IGFueSB1c2VyLWZhY2luZyBiZWhhdmlvci4NCg0KU3BsaXR0aW5nIHRoZSBjaGVja3MgbGlrZSB0 aGlzIHNlZW1zIHJlYXNvbmFibGUuICBBcyB5b3UgcG9pbnRlZCBvdXQsDQppdCBkb2Vzbid0IGNo YW5nZSB0aGUgYmVoYXZpb3Igb2YgdGhlIHNlc3Npb24gY2hlY2tzLCB3aGljaCBBRkFJQ1QNCmFy ZW4ndCBuZWNlc3NhcnkgZm9yIHRoZSBraW5kIG9mIHBlcm1pc3Npb25zIGNoZWNrcyB3ZSB3YW50 IHRvIGFkZCB0bw0KdGhlIFJhbmdlVmFyR2V0UmVsaWRFeHRlbmRlZCgpIGNhbGwuDQoNCi0JCW15 cmVsaWQgPSBSZWxhdGlvbkdldFJlbGlkKHJlbCk7DQorCQlteXJlbGlkID0gUmFuZ2VWYXJHZXRS ZWxpZEV4dGVuZGVkKHJ2LCBBY2Nlc3NFeGNsdXNpdmVMb2NrLA0KKwkJCQkJCQkJCQkgICBmYWxz ZSwgUmFuZ2VWYXJDYWxsYmFja0ZvclRydW5jYXRlLA0KKwkJCQkJCQkJCQkgICBOVUxMKTsNCg0K U2hvdWxkIHRoZSBmbGFncyBhcmd1bWVudCBiZSAwIGluc3RlYWQgb2YgZmFsc2U/DQoNCisJLyog Tm90aGluZyB0byBkbyBpZiB0aGUgcmVsYXRpb24gd2FzIG5vdCBmb3VuZC4gKi8NCisJaWYgKCFP aWRJc1ZhbGlkKHJlbElkKSkNCisJCXJldHVybjsNCisNCisJdHVwbGUgPSBTZWFyY2hTeXNDYWNo ZTEoUkVMT0lELCBPYmplY3RJZEdldERhdHVtKHJlbElkKSk7DQorCWlmICghSGVhcFR1cGxlSXNW YWxpZCh0dXBsZSkpCS8qIHNob3VsZCBub3QgaGFwcGVuICovDQorCQllbG9nKEVSUk9SLCAiY2Fj aGUgbG9va3VwIGZhaWxlZCBmb3IgcmVsYXRpb24gJXUiLCByZWxJZCk7DQoNClRoZSBmaXJzdCB0 aW1lIHdlIHVzZSB0aGlzIGNhbGxiYWNrLCB0aGUgcmVsYXRpb24gd29uJ3QgYmUgbG9ja2VkLCBz bw0KaXNuJ3QgaXQgcG9zc2libGUgdGhhdCB3ZSB3b24ndCBnZXQgYSB2YWxpZCB0dXBsZSBoZXJl PyAgSSBkaWQgbm90aWNlDQp0aGF0IGNhbGxiYWNrcyBsaWtlIFJhbmdlVmFyQ2FsbGJhY2tGb3JS ZW5hbWVSdWxlLA0KUmFuZ2VWYXJDYWxsYmFja0ZvclBvbGljeSwgYW5kIFJhbmdlVmFyQ2FsbGJh Y2tGb3JSZW5hbWVUcmlnZ2VyIGFzc3VtZQ0KdGhhdCB0aGUgcmVsYXRpb24gY2FuIGJlIGNvbmN1 cnJlbnRseSBkcm9wcGVkLCBidXQNClJhbmdlVmFyQ2FsbGJhY2tPd25zUmVsYXRpb24gZG9lcyBu b3QuICBJbnN0ZWFkLCB3ZSBhc3N1bWUgdGhhdCB0aGUNCnN5c2NhY2hlIHNlYXJjaCB3aWxsIHN1 Y2NlZWQgaWYgdGhlIGdpdmVuIE9JRCBpcyB2YWxpZC4gIElzIHRoaXMgYQ0KYnVnLCBvciBhbSBJ IG1pc3Npbmcgc29tZXRoaW5nPw0KDQpOYXRoYW4NCg0K