https://pwn.watch/i/http2-rapid-reset-ddos-cve-2023-44487 Attackers abused HTTP/2 stream cancellation (open a request, reset it right away, repeat) to make servers do work at enormous rates. Peaks hit 398M req/s at Google, 201M at Cloudflare and 155M at AWS. Almost every HTTP/2 server and proxy needed a fix, including Node.js, Go, Java servers, .NET/IIS and nginx. en Tue, 10 Oct 2023 00:00:00 GMT https://pwn.watch/i/http2-rapid-reset-ddos-cve-2023-44487 https://pwn.watch/i/http2-rapid-reset-ddos-cve-2023-44487#2023-10-10-f350151a Tue, 10 Oct 2023 00:00:00 GMT high <p><a href="https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack">Source</a></p> https://pwn.watch/i/http2-rapid-reset-ddos-cve-2023-44487 https://pwn.watch/i/http2-rapid-reset-ddos-cve-2023-44487#2023-08-25-92acc0e7 Fri, 25 Aug 2023 00:00:00 GMT high <p><a href="https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/">Source</a></p>