kuhumcst / glossematics

The life of Louis Hjelmslev.
https://glossematics.dk
4 stars 1 forks source link

Delegate GZipHandler and DoSFilter to nginx #11

Closed simongray closed 3 years ago

simongray commented 3 years ago

The solution to https://github.com/kuhumcst/glossematics/issues/8 will most likely be to run nginx and certbot inside Docker containers alongside the web service as part of a docker-compose configuration. Part of the challenge here is to remove web server functionality from the Jetty configuration, putting them inside nginx instead, specifically: GZipHandler and DoSFilter.

simongray commented 3 years ago

Nginx directives for DDos protection: https://inmediatum.com/en/blog/engineering/ddos-attacks-prevention-nginx/#:~:text=Nginx%2C%20a%20highly%20popular%20server,is%20proxied%20to%20backend%20services.

simongray commented 3 years ago

Official documentation on Gzipping: https://docs.nginx.com/nginx/admin-guide/web-server/compression/

simongray commented 3 years ago

More on rate limiting: https://www.nginx.com/blog/rate-limiting-nginx/

simongray commented 3 years ago

More nginx configuration: https://www.nginx.com/blog/help-the-world-by-healing-your-nginx-configuration/