jianglai 3cfde5d4a1 Fix EPP quota handling bug ... We limit the maximum number of concurrent connections that a client can make the proxy. The quota is implemented as a (thread-safe) map of client certificate hash to available number of connections. When a new connection is made, we decrement the availability counter by one. When the counter hits zero, no more connections can be made and any new connection from the same client is terminated by the proxy. Currently, the counter is incremented when a connection is terminated, including connections that are terminated *because* the quota is reached (i. e. the connections for which the counter is not decremented because the counter is already zero). This means that the first time the quota is reached, the next connection is dropped, the counter is incremented to 1 and new connections can be made again, bypassing the quota. This process can be repeated to achieve, theoretically, infinite quota. This CL fixes this bug by only incrementing the counter, upon connection termination, for connections that have decremented the counter in the first place. ------------- Created by MOE: https://github.com/google/moe MOE_MIGRATED_REVID=217231593		2018-10-17 11:56:04 -04:00
..
com/google/testing/builddefs	Format .bzl files with buildifier	2018-07-14 01:37:03 -04:00
google/registry	Fix EPP quota handling bug	2018-10-17 11:56:04 -04:00