SoftEther VPN User Forum

How is everyone else handling things like slowloris? I would assume it be more of an http request timeout to handle the incomplete HTTP requests but I am having a problem deciphering which setting, if any, would mitigate the attack.

Instead of trying several settings related to connection timeouts I thought you may know the easy answer.

Also to specify, the CVE is:

https://nvd.nist.gov/vuln/detail/CVE-2017-7670

Some settings I was planning on playing with.

uint MaxConnectionsPerIP
uint MaxUnestablishedConnections
uint max_sessions
uint max_sessions_client

155 views and no ideas?

MaxConnectionsPerIP doesn't work?