pomerium / pomerium / 27444930059

52%

Build Type

push

github

Committed by web-flow

Commit Message

ssh: fix connection buffer limits (#6448)

## Summary

For SSH clusters, set connection buffer high watermark limits to the
minimum safe value of 524288. The same limit is also used for the ssh
listener (it was previously unset, which used the 1MB default).

See the linked envoy-custom PR for more details on where that number
comes from.

## Related issues

Fixes https://github.com/pomerium/pomerium/issues/6285

Related: https://github.com/pomerium/envoy-custom/pull/251/changes

## User Explanation

The default connection buffer limit, which was applied globally, is
32768. This is suitable for HTTP, but is too small for SSH connections.
This could cause connections to get stuck in some use cases, such as
during large file transfer.

## AI disclosure

none

## Checklist

- [x] reference any related issues
- [ ] updated unit tests
- [x] add appropriate label (`enhancement`, `bug`, `breaking`,
`dependencies`, `ci`)
- [x] disclosed AI usage (or wrote "none") per AI_POLICY.md
- [x] ready for review

Coverage Stats

7 of 7 new or added lines in 3 files covered. (100.0%)

32 existing lines in 9 files now uncovered.

36906 of 70530 relevant lines covered (52.33%)

462.97 hits per line