Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix #8067 Use nanotime for DosFilter rate tracker (#8082) #8112

Merged
merged 1 commit into from
Jun 7, 2022
+7 −8
Merged

Fix #8067 Use nanotime for DosFilter rate tracker (#8082) #8112

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 6 additions & 6 deletions jetty-servlets/src/main/java/org/eclipse/jetty/servlets/DoSFilter.java
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -322,7 +322,7 @@ protected void doFilter(HttpServletRequest request, HttpServletResponse response
tracker = getRateTracker(request);

// Calculate the rate and check if it is over the allowed limit
final OverLimit overLimit = tracker.isRateExceeded(System.currentTimeMillis());
final OverLimit overLimit = tracker.isRateExceeded(System.nanoTime());

// Pass it through if we are not currently over the rate limit.
if (overLimit == null)
Expand Down Expand Up @@ -1182,8 +1182,8 @@ public RateTracker(ServletContext context, String filterName, String id, RateTyp
}

/**
* @param now the time now (in milliseconds)
* @return the current calculated request rate over the last second
* @param now the time now (in nanoseconds) used to calculate elapsed time since previous requests.
* @return the current calculated request rate over the last second if rate exceeded, else null.
*/
public OverLimit isRateExceeded(long now)
{
Expand All @@ -1201,9 +1201,9 @@ public OverLimit isRateExceeded(long now)
}

long rate = (now - last);
if (rate < 1000L)
if (TimeUnit.NANOSECONDS.toSeconds(rate) < 1L)
{
return new Overage(Duration.ofMillis(rate), _maxRequestsPerSecond);
return new Overage(Duration.ofNanos(rate), _maxRequestsPerSecond);
}
return null;
}
Expand Down Expand Up @@ -1292,7 +1292,7 @@ public void run()

int latestIndex = _next == 0 ? (_timestamps.length - 1) : (_next - 1);
long last = _timestamps[latestIndex];
boolean hasRecentRequest = last != 0 && (System.currentTimeMillis() - last) < 1000L;
boolean hasRecentRequest = last != 0 && TimeUnit.NANOSECONDS.toSeconds(System.nanoTime() - last) < 1L;

DoSFilter filter = (DoSFilter)_context.getAttribute(_filterName);

Expand Down
3 changes: 1 addition & 2 deletions jetty-servlets/src/test/java/org/eclipse/jetty/servlets/DoSFilterTest.java
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,6 @@
import java.net.InetSocketAddress;
import java.util.Collections;
import java.util.Enumeration;
import java.util.concurrent.TimeUnit;
import javax.servlet.FilterConfig;
import javax.servlet.ServletContext;
import javax.servlet.ServletException;
Expand Down Expand Up @@ -174,7 +173,7 @@ private boolean hitRateTracker(DoSFilter doSFilter, int sleep) throws Interrupte
for (int i = 0; i < 5; i++)
{
Thread.sleep(sleep);
if (rateTracker.isRateExceeded(TimeUnit.NANOSECONDS.toMillis(System.nanoTime())) != null)
if (rateTracker.isRateExceeded(System.nanoTime()) != null)
exceeded = true;
}
return exceeded;
Expand Down