kotovalexarian-likes-gitlab
/
gitlab-org--gitlab-foss
1
0
Fork 0
Code Releases Activity

Precisions about the times specified in gitlab.rb for Rack Attack

This commit is contained in:
Illan RUL-DA CUNHA 2018-11-20 16:44:15 +00:00
parent d179ffc25c
commit 3dbf83fe46
1 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
doc/security/rack_attack.md
View File

@ -35,9 +35,9 @@ For more information on how to use these options check out
gitlab_rails['rack_attack_git_basic_auth'] = { gitlab_rails['rack_attack_git_basic_auth'] = {
'enabled' => true, 'enabled' => true,
'ip_whitelist' => ["127.0.0.1"], 'ip_whitelist' => ["127.0.0.1"],
'maxretry' => 10, 'maxretry' => 10, # Limit the number of Git HTTP authentication attempts per IP
'findtime' => 60, 'findtime' => 60, # Reset the auth attempt counter per IP after 60 seconds
'bantime' => 3600 'bantime' => 3600 # Ban an IP for one hour (3600s) after too many auth attempts
} }
``` ```
@ -55,9 +55,9 @@ The following settings can be configured:
- `maxretry`: The maximum amount of times a request can be made in the - `maxretry`: The maximum amount of times a request can be made in the
specified time. specified time.
- `findtime`: The maximum amount of time failed requests can count against an IP - `findtime`: The maximum amount of time failed requests can count against an IP
before it's blacklisted. before it's blacklisted (in seconds).
- `bantime`: The total amount of time that a blacklisted IP will be blocked in - `bantime`: The total amount of time that a blacklisted IP will be blocked (in
seconds. seconds).
**Installations from source** **Installations from source**