~/talk

The tale of avoiding a time-based DDOS attack in Node.js

watch on portal.gitnation.org ↗https://portal.gitnation.org/contents/the-tale-of-avoiding-a-time-based-ddos-attack-in-nodejs
Talkat Node Congress 2023 · 2023-04-14..04-17· [security, nodejs]

speaker

name:Paolo Insogna
website:https://paoloinsogna.dev

resources

video:https://portal.gitnation.org/contents/the-tale-of-avoiding-a-time-based-ddos-attack-in-nodejs
slides:none on file

summary

Explains how time-based DDoS vectors like Slowloris and the newer Zoloris exploit server timeout weaknesses, and reviews Node.js timeout handling (noting improvements in Node 18). Recommends using NGINX for better timeout protection, and describes WebSocket-specific mitigations such as raising timeouts and closing idle clients while emphasizing prioritizing security over performance.

AI-written summary · about

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.