search

bunkerity / bunkerweb

🛡️ Open-source and next-generation Web Application Firewall (WAF)
https://www.bunkerweb.io
GNU Affero General Public License v3.0
6.54k stars 368 forks source link

[FEATURE] AntiDDoS #207

Closed valsha closed 1 year ago

valsha commented 3 years ago

Good day, can you add this feature, example https://github.com/C0nw0nk/Nginx-Lua-Anti-DDoS Layer 7 antiDDoS protection. Thank you.

fl0ppy-d1sk commented 2 years ago

Hello @valsha,

We already have the antibot feature : https://docs.bunkerweb.io/1.4/security-tuning/#antibot

Do you have any idea on what we should add ?

wiseweb-works commented 2 years ago

Hello @valsha,

We already have the antibot feature : https://docs.bunkerweb.io/1.4/security-tuning/#antibot

Do you have any idea on what we should add ?

I think it would be perfect to use the all anti-bot options (or more than one) together. By the way, my answer to this topic is also related to this #237 issue. For example, it may be requested to set the (random generated) cookie first and follow the redirect address. The redirect adress would be /challenge. Then the JavaScript challenge is performed here. And (optionally) invisible captcha or recaptcha2 can be used on site wide. For example, those with a reputation of 0.5 or less must solve the captcha code. The default value is 0.7, I think it is suitable only if reCAPTCHA is to be used alone, otherwise it causes a lot of hardness.

fl0ppy-d1sk commented 1 year ago

Closing this in favor of #237