Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Prevent DOS attack
#5
All components need a session to be rendered. In this specific scenario, a content handler could possibly be used. That's the idea and we are working on it.

Recent versions of IW 15 contain a new security feature which restricts the number of sessions that can be started by IP address.

ServerController.SecurityOptions.MaxActiveSessionsPerIp, default is 0

If greater than zero, it will limit the number of active sessions starting from the same IP address. You can set this to enforce any other measure that you have in place.

When the limit is reached, any new request requiring a new session from the same IP address will return 429 Too Many Requests

This will continue until the some or all of the existing sessions expire.
Reply


Messages In This Thread
Prevent DOS attack - by PDSBILL - 09-16-2020, 02:29 PM
RE: Prevent DOS attack - by kudzu - 09-17-2020, 04:26 PM
RE: Prevent DOS attack - by Alexandre Machado - 09-22-2020, 12:40 PM
RE: Prevent DOS attack - by PDSBILL - 09-22-2020, 12:48 PM
RE: Prevent DOS attack - by Alexandre Machado - 09-22-2020, 09:25 PM
RE: Prevent DOS attack - by PDSBILL - 09-22-2020, 10:01 PM
RE: Prevent DOS attack - by Alexandre Machado - 09-23-2020, 02:40 AM
RE: Prevent DOS attack - by PDSBILL - 09-23-2020, 06:53 PM
RE: Prevent DOS attack - by Alexandre Machado - 09-23-2020, 09:52 PM
RE: Prevent DOS attack - by PDSBILL - 09-24-2020, 04:33 PM

Forum Jump:


Users browsing this thread: 1 Guest(s)