search

krakenjs / lusca

Application security for express apps.
Other
1.79k stars 123 forks source link

DDOS - does lusca contains protection from ddos attacks #115

Open maxprog opened 7 years ago

maxprog commented 7 years ago

Does lusca contains protection from ddos attacks?

grawk commented 7 years ago

No, it does not. I would recommend some type of rate limiting middleware in the express application. Else, attempt to detect the DDOS closer to the "edge" of your deployment. I.e. if you are reverse proxying node.js with nginx, at that layer instead.

maxprog commented 7 years ago

Thank You very much. I have the same opinion. I use express-rate-limit and described on http://maxprog.net.pl/node-js/node-js-protection-from-brute-force-and-ddos-attacks/