search

tempesta-tech / tempesta-test

Test suite for Tempesta FW
11 stars 4 forks source link

Frang limit: connection_burst does not work #240

Closed KonsKo closed 2 years ago

KonsKo commented 2 years ago

Frang limit connection_burst does not work properly.

Client: curl backend: nginx

Curl request: '-Ikf -v <url> -H "Host: tempesta-tech.com:8765" -H "Connection: close"'

Tempesta:

 frang_limits {
      connection_rate 4;
      connection_burst 2;
  }

docs https://github.com/tempesta-tech/tempesta/wiki/HTTP-security#connection-level-limits

connection_rate - I checked with 5 requests delayed with 0.125 sec between them (for purpose to not reach connection_burst limit) and everything works as expected. I checked journalctl and got expected warning

connection_burst - I checked with 3 requests NOT delayed with 0.125 sec between them. I checked journalctl and DID NOT get expected warning

connection_burst - I checked with 5 requests NOT delayed with 0.125 sec between them. I checked journalctl and got warning related to connection_rate

I use same approach for request_rate and request_burst - everything works as expected.

krizhanovsky commented 2 years ago

Moved to https://github.com/tempesta-tech/tempesta/issues/1649