#3702 - Backing-off algorithm for flood control

Identifier #3702
Issue type Feature request or suggestion
Title Backing-off algorithm for flood control
Status Open
Tags

Type: Performance (custom)

Handling member Deleted
Addon core
Description Rather than the flood control just limiting the number of hits per second per IP, have it reduce the allowed rate for an IP over time.

For example, if 10 hits per 10 seconds are allowed, only allow say 40 hits per 60 seconds, and 100 hits per 10 minutes, and so on.

This is to reduce the ability for botnets to max out the rate limit on a number of machines in parallel (Layer-7 DDOS).
Steps to reproduce

Funded? No
The system will post a comment when this issue is modified (e.g., status changes). To be notified of this, click "Enable comment notifications".

Rating

Unrated