[tor-bugs] #4581 [Tor]: Dir auths should defend themselves from too many begindir requests per address

[Tor Bug Tracker & Wiki]

#4581: Dir auths should defend themselves from too many begindir requests per
address
-------------------------+-------------------------------------------------
     Reporter:  arma     |      Owner:  andrea
         Type:  defect   |     Status:  assigned
     Priority:  major    |  Milestone:  Tor: 0.2.8.x-final
    Component:  Tor      |    Version:  Tor: 0.2.7
   Resolution:           |   Keywords:  maybe-proposal, tor-auth,
Actual Points:           |  027-triaged-1-in, SponsorU, TorCoreTeam201509
       Points:  medium   |  Parent ID:
-------------------------+-------------------------------------------------

Comment (by andrea):

 This grew an EWMA implementation in the process; I don't want to fold
 "refactor circuitmux_ewma.c" into this, and they would need separate pools
 of counters since they take their time constants from different sources,
 but it'd probably be a good idea to consider for the future implementing a
 generic EWMA module with counter pools that can handle dynamic changes of
 time constant and refactor both the initial implementation of this and
 circuitmux_ewma.c to use it.  I'm not 100% sure circuitmux_ewma.c gets
 adjusting the existing counters for decay rate changes correct anyway.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/4581#comment:21>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online