Services/KeyExchange: Difference between revisions

Line 352: Line 352:
** Configurable threshold for adding IP address to Blacklist/Penalty Box
** Configurable threshold for adding IP address to Blacklist/Penalty Box
** Configurable time-out for IP addresses added to Blacklist/Penalty Box
** Configurable time-out for IP addresses added to Blacklist/Penalty Box
** Concern - NAT'ed IP address used by multiple users
* A single shared blacklist will exist within memcache
* A single shared blacklist will exist within memcache
* LRU queues will be unique to each server and will penalize an IP to the shared blacklist on memcache
* LRU queues will be unique to each server and will penalize an IP to the shared blacklist on memcache
* All thresholds will be controlled via the configuration page  
* All thresholds will be controlled via the configuration page


=== TearDown DOS Defense ===
=== TearDown DOS Defense ===
Confirmed users
491

edits