hackerschoice / segfault

346 stars 38 forks source link

throttle outbound sync #22

Closed SkyperTHC closed 1 year ago

SkyperTHC commented 1 year ago

prevent mass scanning.

Could be done with linux/tc (traffic controL) and control the number of sync's. Exceeding quota shall block the sync (but not reset the connection) until amount of sync goes below threshold.

SkyperTHC commented 1 year ago

this has now been included (thanks you messede degod). 8k syn burst per container, then 2syn/second. Global limit 10k sync bursts and on exhaustion 20syn/sec