Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Increment number of max-connection-per-server #126

Closed
lardissone opened this issue Sep 15, 2013 · 4 comments
Closed

Increment number of max-connection-per-server #126

lardissone opened this issue Sep 15, 2013 · 4 comments

Comments

@lardissone
Copy link

Is there a way to increment this max to something higher than 16?

Why is this limitation?

@tatsuhiro-t
Copy link
Collaborator

16 is plenty. Too easy to do DOS.
If you want more, change the source code as you like.

JackieXie168 pushed a commit to JackieXie168/aria2c that referenced this issue Dec 26, 2018
添加 README.md 中该工具的 HomeBrew 安装方式描述
@Saren-Arterius
Copy link

16 is plenty. Too easy to do DOS.
If you want more, change the source code as you like.

  1. Aria2 is not a great tool for DoS.
  2. If Aria2 is will be used for a tool for DoS, the attacker could change to a higher value and re-compile it. So why bother limit it in source code?
  3. Server host could easily block the offending connections.
  4. If we need it, we know what we are doing.

Therefore, the 16 limit is not necessary. Please re-consider.

@recolic
Copy link

recolic commented Jan 6, 2021

Azure official tool azcopy creates 128 connections by default, and has 1300Mbps download speed in MSFT intranet.
But aria2c has only 70 Mbps download speed. TCP window size limit in a high latency connection restricts bandwidth of single connection.

aria2c is "the ultra fast download utility", but it's not.


btw, it's still too easy to do DOS in this way, please close the whole aria2 project.

while true
    nohup aria2c -x 1 http://some.naive.target.com/naive.target & disown
end

@expecttheunusual
Copy link

expecttheunusual commented Aug 7, 2023

Besides, hackers could provide a malicious version of aria2c which has no 16-limit. Sure, you are protecting the servers, but doing so will indirectly put your clients at risk because you don't actually give the users what they want. It's like getting a porsche with an engine of a fucking tractor. It's usable for normal users but for those that want more out of it, naturally get pretty annoyed at the limits. The normal users that do not have mechanic-skills can't use the porsche as fast as they want to.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

5 participants