Re: maximum data over link

[Bart Vanherck <herckb pandora be>]

On Mon, 2004-09-27 at 03:31, Bowie Owens wrote:

> As I understand it, the purpose of GIOP_INITIAL_MSG_SIZE_LIMIT is to 
> prevent a DOS attack from consuming memory on a server via large invalid 
> messages. The first time a server receives a valid message it is 
> supposed to record that the client is legit and ignore the size of the 
> messages from then on. So you can send a short "hello" message to the 
> server and then after that send messages of any size. A while ago ORBit 
> was always applying the size limit. I don't know if it still does this 
> as I ended up working around the problem using the command line argument:
> 
> --ORBInitialMsgLimit=4000000000
I did some tests with this and I saw that after first sending an hello 
message, and afterwards retrieving a huge buffer does not work. The 
command line argument does work. 
However I have a little question. This GIOP_INITIAL_MSG_SIZE_LIMIT is 
for me at the "client" side that is preventing to receive a large
buffer. And so I did set the argument for the client only. How does this
prevent a possible DOS ? I did not have to set this argument at the
server side.


regards,

Bart