summaryrefslogtreecommitdiff
path: root/nginx
diff options
context:
space:
mode:
authorDaniel Micay <danielmicay@gmail.com>2020-11-24 07:58:02 -0500
committerDaniel Micay <danielmicay@gmail.com>2020-11-24 07:58:02 -0500
commitf195b74410c92a18cc402ca9aeff3ecf8d6f32d5 (patch)
tree97605ae7bd5a00b87812c22d98b05b0cb3b3d34e /nginx
parent6bad648347d41bed31f80ae53e722df6927bf2db (diff)
enforce an initial HTTP connection limit per IP
Diffstat (limited to 'nginx')
-rw-r--r--nginx/nginx.conf3
1 files changed, 3 insertions, 0 deletions
diff --git a/nginx/nginx.conf b/nginx/nginx.conf
index 4a92e868..a86a3758 100644
--- a/nginx/nginx.conf
+++ b/nginx/nginx.conf
@@ -25,6 +25,9 @@ http {
client_header_timeout 30s;
send_timeout 30s;
+ limit_conn_zone $binary_remote_addr zone=addr:10m;
+ limit_conn addr 256;
+
ssl_protocols TLSv1.2 TLSv1.3;
ssl_prefer_server_ciphers on;