Reject large transactions on federation

changelog.d/4513.misc

@@ -0,0 +1 @@
+Reject federation transactions if they include more than 50 PDUs or 100 EDUs.

synapse/federation/federation_server.py

@@ -148,6 +148,22 @@ def _handle_incoming_transaction(self, origin, transaction, request_time):
 
         logger.debug("[%s] Transaction is new", transaction.transaction_id)
 
+        # Reject if PDU count > 50 and EDU count > 100
+        if (len(transaction.pdus) > 50
+                or (hasattr(transaction, "edus") and len(transaction.edus) > 100)):
+
+            logger.info(
+                "Transaction PDU or EDU count too large. Returning 400",
+            )
+
+            response = {}
+            yield self.transaction_actions.set_response(
+                origin,
+                transaction,
+                400, response
+            )
+            defer.returnValue((400, response))
+
         received_pdus_counter.inc(len(transaction.pdus))
 
         origin_host, _ = parse_server_name(origin)