OpenStack Object Storage (swift)

  1. Series grizzly
  2. Bug #1196932
  3. Comment #19

Comment 19 for bug 1196932

Revision history for this message
Samuel Merritt (torgomatic) wrote : Re: Possibly DoS attack using object tombstones

Okay, so this seems like it actually constitutes a DoS attack. Ugh.

How's this sound for a proposed fix:

Make it so the object server returns 409 Conflict if you try to make something with an X-Timestamp older than the new thingy on disk. Strictly speaking, this is probably the only bit that has to be done to fix the hole. That's DELETE, PUT, and POST.

This is basically what Peter's patch does, only for more verbs.