TechPrufer
Get started
Cloudflare
Cloudflare logoCloudflare · Feature trail

HTTP Request Loop Prevention

1 post · Jan 2016

What this trail covers

Cloudflare's approach to preventing HTTP request loops has evolved from implementing RFC 7230 compliant 'Via' header checks to actively addressing non-compliant proxy services that strip or modify these headers. This involves educating the industry and collaborating on solutions to ensure robust protection against resource exhaustion and denial of service attacks caused by such loops.

All Cloudflare trails
  1. Preventing Malicious Request LoopsThis post details the attack vector of malicious request loops caused by non-compliant reverse proxies that strip or modify the 'Via' header, contrary to RFC 7230. It explains how Cloudflare's implementation of the 'Via' header prevents such loops and calls for other proxy services to adopt RFC 7230 compliance to avoid negative consequences for the ecosystem.