Cavemanon/haproxy-protection
8
Fork 0
mirror of https://gitgud.io/fatchan/haproxy-protection.git synced 2025-05-09 02:05:37 +00:00
Code Issues Packages Projects Releases Wiki Activity

Test another stick table, track req.query

Browse Source
This commit is contained in:
Thomas Lynch
2024-07-07 23:03:04 +10:00
parent 53a679fc76
commit f6ec537cb0
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
haproxy/haproxy.cfg
View File

@ -74,6 +74,9 @@ frontend http-in
# debug information at /.basedflare/cgi/trace
http-request return status 200 content-type "text/plain; charset=utf-8" lf-file /etc/haproxy/template/trace.txt if { path /.basedflare/cgi/trace }
http-request track-sc0 query table count_qs_throttle if { query -m found }
http-request redirect location http://%[hdr(host)]/%[table_cnt(count_qs_throttle)] code 302 if TRUE
# acl for blocked IPs/subnets/ASN/country
http-request lua.set-lang-json
acl found_in_blockedip_map src,map_ip(/etc/haproxy/map/blockedip.map) -m found
@ -88,7 +91,7 @@ frontend http-in
http-request deny deny_status 403 if blocked_bool
# ratelimit (and for tor, kill circuit) on POST bot-check. legitimate users shouldn't hit this.
http-request track-sc0 src table bot_check_post_throttle if { path /.basedflare/bot-check } { method POST }
# http-request track-sc0 src table bot_check_post_throttle if { path /.basedflare/bot-check } { method POST }
# http-request lua.kill-tor-circuit if { sc_http_req_rate(0) gt 1 }
# http-request tarpit if { sc_http_req_rate(0) gt 1 }
@ -177,6 +180,9 @@ backend servers
backend bot_check_post_throttle
stick-table type ipv6 size 100k expire 60s store http_req_rate(60s)
backend count_qs_throttle
stick-table type string size 100k expire 60s store http_req_rate(60s)
backend hcaptcha
mode http
server hcaptcha hcaptcha.com:443