Application Load Balancers should be configured to use defensive or strictest desync mitigation mode
Cette page n'est pas encore disponible en français, sa traduction est en cours.
Si vous avez des questions ou des retours sur notre projet de traduction actuel,
n'hésitez pas à nous contacter.
Description
This check verifies whether an Application Load Balancer is set to use either the defensive or strictest desync mitigation mode. The verification is considered unsuccessful if the Application Load Balancer is not configured with one of these modes.
HTTP desynchronization issues can result in request smuggling, exposing applications to vulnerabilities such as request queue or cache poisoning. These vulnerabilities can, in turn, lead to credential stuffing or the execution of unauthorized commands. By configuring your Application Load Balancer with either the defensive or strictest desync mitigation mode, you can safeguard your application from security risks associated with HTTP desynchronization.
To change the desync mitigation mode for an Application Load Balancer, refer to the [Desync Mitigation Mode section in the Application Load Balancers User Guide].
