auto-ssl / auto-ssl/lua-resty-auto-ssl

When REDIS unavailable, there is a risk of LetsEncrypt quotas exhaustion

Open
#108 0 comments 0 reactions 0 assignees View on GitHub
bug
Dominant language
Lua
Stars
2k
Forks
184
PR merge metrics
No merged PRs in 30d

Description

When working with REDIS adapter for storing certificates:
If REDIS is unavailable, sequence of attempts to connect with HTTPS may cause a sequence of requests to LetsEncrypt to be set and an exhaustion of quota (causing a 1 hour freeze).

We should introduce a logic that will protect from the above scenario.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by tracing the Redis adapter failure path and the sequence of HTTPS requests made to Let's Encrypt. Define and implement protection against repeated certificate requests when Redis is unavailable, then verify that the failure path no longer risks quota exhaustion or the reported one-hour freeze.

Written by the indexing model from the issue text.

Assessment

Tech stack
lua, nginx, redis
Domain
backend, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.