Mercurial > hg > nginx-quic
annotate conf/fastcgi_params @ 8798:077a1e403446 quic
QUIC: additional limit for probing packets.
RFC 9000, 9.3. Responding to Connection Migration:
An endpoint only changes the address to which it sends packets in
response to the highest-numbered non-probing packet.
The patch extends this requirement to probing packets. Although it may
seem excessive, it helps with mitigation of reply attacks (when an off-path
attacker has copied packet with PATH_CHALLENGE and uses different
addresses to exhaust available connection ids).
author | Vladimir Homutov <vl@nginx.com> |
---|---|
date | Thu, 20 Jan 2022 22:00:25 +0300 |
parents | 62869a9b2e7d |
children |
rev | line source |
---|---|
537 | 1 |
2 fastcgi_param QUERY_STRING $query_string; | |
3 fastcgi_param REQUEST_METHOD $request_method; | |
4 fastcgi_param CONTENT_TYPE $content_type; | |
5 fastcgi_param CONTENT_LENGTH $content_length; | |
6 | |
7 fastcgi_param SCRIPT_NAME $fastcgi_script_name; | |
8 fastcgi_param REQUEST_URI $request_uri; | |
9 fastcgi_param DOCUMENT_URI $document_uri; | |
10 fastcgi_param DOCUMENT_ROOT $document_root; | |
11 fastcgi_param SERVER_PROTOCOL $server_protocol; | |
6168
62869a9b2e7d
Added the REQUEST_SCHEME parameter.
Maxim Dounin <mdounin@mdounin.ru>
parents:
4333
diff
changeset
|
12 fastcgi_param REQUEST_SCHEME $scheme; |
4333
352a7b025f2e
Added HTTPS param with Apache-like behaviour to fastcgi/scgi/uwsgi_params (fixes #38).
Valentin Bartenev <vbart@nginx.com>
parents:
1330
diff
changeset
|
13 fastcgi_param HTTPS $https if_not_empty; |
537 | 14 |
15 fastcgi_param GATEWAY_INTERFACE CGI/1.1; | |
1330 | 16 fastcgi_param SERVER_SOFTWARE nginx/$nginx_version; |
537 | 17 |
18 fastcgi_param REMOTE_ADDR $remote_addr; | |
19 fastcgi_param REMOTE_PORT $remote_port; | |
20 fastcgi_param SERVER_ADDR $server_addr; | |
21 fastcgi_param SERVER_PORT $server_port; | |
22 fastcgi_param SERVER_NAME $server_name; | |
23 | |
24 # PHP only, required if PHP was built with --enable-force-cgi-redirect | |
25 fastcgi_param REDIRECT_STATUS 200; |