← Back to Attack / Defense Lab
OSI LAYER 4 // Transport Layer

Connection Exhaustion

Connection exhaustion consumes server resources by creating more concurrent transport/application connections than the service can handle.

01 // HOW IT WORKS

Mechanism

The attacker focuses on the number and lifetime of connections rather than raw bandwidth. Slow or incomplete connections can be particularly expensive.

02 // DETECTION

Indicators to watch

Connection counts near limits, long-lived incomplete sessions, queue saturation, and rising latency without proportional bandwidth growth.

03 // ATTACK FLOW

Concept diagram

01Many clients / connections↓
02Connection slots consumed↓
03Queues / timeouts fill↓
04Service latency↓
05Limits + reverse proxy
04 // PREVENTION

Defensive controls

Set connection limits and timeouts, use reverse proxies, rate limits, load balancing, and resource isolation.

05 // SECURITY TOOL

Recommended security control

Reverse proxy metrics / SIEM

Use synthetic load in a permitted test environment.

06 // DEFENCE PRACTICE LAB

Defence practice lab

The administrator has not attached a tool link yet. This slot will show “Build Soon” until an external link is configured.

Build Soon
◈
DEFENCE PRACTICE LAB // BUILD SOONThe administrator can add or edit an external defence practice lab link from the private admin portal.
07 // DEFENCE TECHNIQUES

Defence techniques

Defence techniques for this attack will be added by the administrator.

AUTHORIZED LEARNING

All attack descriptions are for defensive education. Test scanning, traffic generation, interception, wireless testing, and vulnerable applications only on systems and networks you own or are explicitly authorized to assess.