Skip to content

Add subnet-based throttling and SAFELIST_IP environment-variable-based safelisting

rfb11 requested to merge rack-attack-subnet-throttle into main

This adds two extra IPv4 rack-attack throttles with exponential limits up two subnet levels, e.g. if A.B.C.D has a 1req/sec limit, A.B.C.* will get 256reqs/sec, and A.B.* will get 65,536reqs/sec.

This also introduces a SAFELIST_IP environment variable which can take a comma-separated list of IP's (including in subnet mask notation) to safelist.

Merge request reports