Banning IPs for DoS reasons
- Dominant language
- Python
- Stars
- 58
- Forks
- 160
- Avg merge
- 5d 11h
- Merged PRs (30d)
- 12
Description
Deployments of Central should consider banning IPs for DoS reasons. Two options to consider are fail2ban and Cloudflare. We thought about adding fail2ban to Central, but we decided not to:
- fail2ban is platform-dependent because it uses iptables.
- Some hosts will provide some protection out of the box - [aws](https://docs.aws.amazon.com/whitepapers/latest/aws-best-practices-ddos-resiliency/mitigation-techniques.html).
- It seems like this protection should be added outside/upstream of Central.
Contributor guide
Research direction
No file or test is named. Start by reviewing the deployment documentation and the cited AWS guidance, then compare the fail2ban and Cloudflare options with protection provided upstream of Central. Done means reaching a clear decision about whether Central's documentation should describe an upstream mitigation and what deployment guidance is needed.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws
- Domain
- documentation, infrastructure, security
- Issue type
- Documentation
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100