cloud-hosting-platform/haproxy-manager-base
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Raise connection rate limit from 60 to 150 per 10s
All checks were successful
HAProxy Manager Build and Push / Build-and-Push (push) Successful in 56s
Details

Browse Source 
Gives more headroom for customers with code that makes frequent
callbacks to itself, while still catching connection floods.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Josh Knapp
2026-03-31 12:25:53 -07:00
parent a3b19ce352
commit 2ba8f87c2c
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
templates/hap_listener.tpl
View File

@@ -32,8 +32,8 @@ frontend web
http-request deny deny_status 429 if { sc_http_req_rate(0) gt 500 } !is_local !is_health_check
# Tarpit: >200 req/10s per IP (aggressive scraping / light flood)
http-request tarpit deny_status 429 if { sc_http_req_rate(0) gt 200 } !is_local !is_health_check
# Connection rate limit: >60 new connections per 10s per IP
http-request deny deny_status 429 if { sc_conn_rate(0) gt 60 } !is_local !is_health_check
# Connection rate limit: >150 new connections per 10s per IP
http-request deny deny_status 429 if { sc_conn_rate(0) gt 150 } !is_local !is_health_check
# Concurrent connection limit: >100 simultaneous connections per IP
http-request deny deny_status 429 if { sc_conn_cur(0) gt 100 } !is_local !is_health_check
# High error rate: >20 errors in 30s (scanner/fuzzer behavior)