Projects tigase _server server-core Issues #206
Account registration limits (#206)
Artur Hefczyc opened 1 decade ago
Due Date
2015-09-01

Protect from abuse or DOS attack on a number of registered accounts within a period of time and on a number of registered accounts within a period of time from a single IP address. Looks like we experienced some kind of load tests on our system which resulted in 11k new accounts registered within a few houts/minutes....

Artur Hefczyc commented 10 years ago

Estimate work effort for the feature so we can decide whether it can be done for 7.1.0 version.

Artur Hefczyc commented 10 years ago

Bartosz, I need update on this ticket asap.

Bartosz Małkowski commented 10 years ago

I have to implement Token Bucket algorithm for each IP.

Artur Hefczyc commented 10 years ago

Ok, let's do it for 7.2.0 then.

Bartosz Małkowski commented 9 years ago

Implemented.

Configuration:

sess-man/plugins-conf/jabber\:iq\:register/registrations-per-second=10

It allows for 10 registrations from single IP per second.

If limit will be exceeded then NOT_ALLOWED error will be returned.

Daniel Wisnewski commented 9 years ago

If this feature is complete, should we include it in 7.1.0?

Artur Hefczyc commented 9 years ago

Yes,

Bartosz, is this task completed? Status is set to "In Progress".

Bartosz Małkowski commented 9 years ago

Ouch. I forgot to change status, sorry.

Feature is implemented.

issue 1 of 1
Type
New Feature
Priority
Normal
Assignee
RedmineID
1361
Version
tigase-server-7.1.0
Estimation
24h
Spent time
144h
Issue Votes (0)
Watchers (0)
Reference
tigase/_server/server-core#206
Please wait...
Page is in error, reload to recover