ActionCable under stress: Finding a DoS vulnerability in Rails 5 WebSockets Apps

In this article we will show you how Rails 5.0.0 ActionCable applications on Puma, the new default Rails app server, might be exposed to denial of service by slow clients. We will be using the OS X network shaping tools to simulate an attack, revealing the vulnerability.