Harden server config to mitigate request exhaustion

diff --git a/src/getPrf.js b/src/getPrf.js
index 1ad00b619afae6a8eddb7f3bb1bee6c84c6e0e9d..767629d81f298ec68ec0eb52001b2bb2315ea2eb 100644 (file)
--- a/src/getPrf.js
+++ b/src/getPrf.js
@@ -74,6 +74,9 @@ export async function getPrf(options = {}) {
   const scriptHash = new Uint8Array(await crypto.subtle.digest('SHA-512', encoder.encode(script))).toBase64();
 
   const server = http.createServer();
+  server.keepAliveTimeout = 0;
+  server.maxRequestsPerSocket = 1;
+  server.requestTimeout = 1000;
 
   // Flow expires after 2 minutes or canceled
   const timeoutId = setTimeout(() => server.close(() => abortResolve(null)), WINDOW_EXPIRATION_DURATION);