Giveth / giveth-next

Giveth 2.0 implementation in NextJS
https://next.giveth.io
GNU General Public License v3.0
20 stars 13 forks source link

Config rate limit on nginx configuration of sensitive services #613

Closed aminlatifi closed 2 years ago

aminlatifi commented 2 years ago

📋 Anything to add?

Nginx rate limit is an important tool for preventing simple DDoS attacks, as one occurred for trace.giveth.io endpoint.

❓ Why is it important?

Our services can be out of service.

🎉 Subtasks

🤼‍ Reviewer

@aminlatifi

🔗 Work doc - inspirational links

geleeroyale commented 2 years ago

Thanks Amin! I can put it on the servers - can you post the snippet you used for posterity as well?

aminlatifi commented 2 years ago

Thanks Amin! I can put it on the servers - can you post the snippet you used for posterity as well?

@geleeroyale I used the nginx rate limit and it's configured for feathers and trace preview services. But please check them again.

MoeNick commented 2 years ago

@aminlatifi would you pls give accesses to @geleeroyale

MoeNick commented 2 years ago

@geleeroyale if you have any blocker pls let me know

geleeroyale commented 2 years ago

We have such a confusing array of feathers services 😅

I updated these:

serve.giveth.io dappmailer.giveth.io feathers.giveth.io feathers-alpha.giveth.io feathers.beta.giveth.io feathers.bridge.beta.giveth.io feathers.develop.giveth.io feathers.bridge.develop.giveth.io feathers.bridge.release.giveth.io feathers.mainnet.giveth.io feathers.release.giveth.io

MoeNick commented 2 years ago

Should I close this @geleeroyale ? I think I'm not able to test all the required stuff is met or not.

geleeroyale commented 2 years ago

Yes - this issue can be closed 😇