search

kaplanlior / midburn-queue

midburn.org tickets queue system
https://midburn.org
MIT License
2 stars 5 forks source link

DDoS prevention with rack-attack #13

Open eladg opened 8 years ago

eladg commented 8 years ago

Set up and configure - Rack attack middleware for Sinatra. We would like to prevent users from submitting more then 1-2 requests per second.

Great info at: https://www.kickstarter.com/backing-and-hacking/rack-attack-protection-from-abusive-clients.

danielkop commented 8 years ago

Keep in mind that a lot of users might be coming from the same IP, such as Triple C customers behind their Carrier grade NAT: http://www.news1.co.il/Archive/0020-D-348341-00.html

Limiting 1-2 requests per second from a specific IP might end up punishing users for being behind a NAT.

eladg commented 8 years ago

Thanks, yes that's true and need to be thought and discuss. This task should be limited to including rack-attack on the app without configuring any limits.