Sam Saffron b4bfc27b19 FEATURE: introduce default application level rate limiting by IP ...

We have tested rate limiting with admin accounts with block rate limiting for
close to 12 months now on meta.discourse.org.

This has resulted in no degradation of services even to admin accounts that
request a lot of info from the site.

The default of 200 requests a minute and 50 per 10 seconds is very generous.
It simply protects against very aggressive clients.

This setting can be disabled or tweaked using:

DISCOURSE_MAX_REQS_PER_IP_MODE and family.

The only big downside here is in cases when a very large number of users tend
to all come from a single IP.

This can be the case on sites accessing Discourse from an internal network
all sharing the same IP via NAT. Or a misconfigured Discourse that is unable
to resolve IP addresses of users due to proxy mis-configuration.

2019-11-18 15:54:50 +11:00

..

cloud/cloud66

DEV: enable frozen string literal on all files

2019-05-13 09:31:32 +08:00

environments

DEV: Disable better_errors when developing with more than one worker (#8201)

2019-10-16 14:44:48 +01:00

initializers

FIX: include onebox default options in development environment

2019-11-07 15:42:53 +05:30

locales

FEATURE: Add support for secure media (#7888)

2019-11-18 11:25:42 +10:00

application.rb

FIX: update Redis gem to version 4.1.3

2019-10-21 09:59:24 +11:00

boot.rb

DEV: Remove logging when redis is terminated

2019-06-21 10:31:48 +01:00

cdn.yml.sample

Initial release of Discourse

2013-02-05 14:16:51 -05:00

database.yml

DEV: Make setting up of multisite DB in test env clearer.

2019-03-21 09:58:07 +08:00

deploy.rb.sample

enough with the malloc limit, not needed

2016-05-25 21:09:07 +10:00

discourse_defaults.conf

FEATURE: introduce default application level rate limiting by IP

2019-11-18 15:54:50 +11:00

discourse.config.sample

enough with the malloc limit, not needed

2016-05-25 21:09:07 +10:00

discourse.pill.sample

Improve bluepill sample config.

2014-01-31 16:09:35 -05:00

environment.rb

DEV: enable frozen string literal on all files

2019-05-13 09:31:32 +08:00

logrotate.conf

Replace Clockwork with Sidetiq

2013-08-14 21:39:40 +02:00

multisite.yml.production-sample

warns sysadmin to rebake all the posts

2013-08-01 22:24:55 +02:00

nginx.global.conf

Address @Supermathie's concerns in PR1430

2013-09-30 16:28:22 -04:00

nginx.sample.conf

PERF: cache static assets in NGINX for longer

2019-11-07 12:12:24 +11:00

projections.json

Instead of .js.handlebars use .hbs for handlebars templates

2014-09-26 15:23:15 -04:00

puma.rb

DEV: enable frozen string literal on all files

2019-05-13 09:31:32 +08:00

routes.rb

FEATURE: Add support for secure media (#7888)

2019-11-18 11:25:42 +10:00

sidekiq.yml

FEATURE: introduce ultra_low priority queue

2019-01-17 14:53:19 +11:00

site_settings.yml

FEATURE: Add support for secure media (#7888)

2019-11-18 11:25:42 +10:00

spring.rb

DEV: enable frozen string literal on all files

2019-05-13 09:31:32 +08:00

thin.yml.sample

Add sample Capistrano deployment files

2013-05-02 19:53:37 -07:00

unicorn_launcher

FIX: Increase timeout when trying to reload unicorn.

2018-12-04 13:43:14 +08:00

unicorn_upstart.conf

enough with the malloc limit, not needed

2016-05-25 21:09:07 +10:00

unicorn.conf.rb

DEV: add UNICORN_BIND_ALL

2019-10-28 14:11:19 -07:00