GSA / GSA/ansible-https-proxy

Limit concurrent connections from a single IP address

未關閉
#7 0 則留言 0 個 reaction 已指派 0 人 在 GitHub 檢視
主要語言
沒有語言資料
星號
10
分支
5
PR 合併指標
30 天內沒有已合併 PR

描述

>Draft CIS Benchmark 1.1.8

## Description
It might be worthwhile mentioning the following configuration parameters: limit\_conn limit\_conn\_zone (sets shared memory zone) They are used to limit the number of connections per IP address. https://nginx.org/en/docs/stream/ngx\_stream\_limit\_conn\_module.html

## Rationale
The traffic normally originates from a fixed set of IP addresses, belonging to the machines used to carry out the attack. As a result, each IP address is responsible for many more connections and requests than you would expect from a real user.

## Remediation
None provided

## Audit
None provided

貢獻指南

開啟貢獻指南

評估

這個 Issue 還沒有評估資料。

把新 issue 寄到你的電子郵件信箱

精選適合新手參與的 GitHub issue 摘要。