B4J Question DOS Filter how it works (how to configure correctly)?

[Douglas Farias]

Hi all.
I would like to understand how the DOS filter works on the B4J Server


How works the DOS Filter on B4J Server?
This is enabled automatic when you start a server or need some configuration?

i have this line on my code, before the server start.

srvr.AddDoSFilter("/*", CreateMap("maxRequestMs": 5 * 60 * 1000))

but this is sufficient?

i made a test, making a lot of requests to a page and i see the log

2020-04-24 14:27:57.851:WARNejs.DoSFilter:qtp1288354730-11: DOS ALERT: Request delayed=100ms, ip=127.0.0.1, session=null, user=null

but i m not blocked, only show the logs, but i can enter on the website normal.

Questions
how works the block?
how can i block the users making dos attack?
if a user is blocked how can i check the list of blocks?
how unblock a user (ip)?


Obs: the page about DOS (@Erel ) are with the links off (not working)

DoSFilter Request Timeout

The DoSFilter helps with protection against denial of service attacks. It has various configuration options which are listed here: https://www.eclipse.org/jetty/documentation/current/dos-filter.html I was investigating a timeout issue with B4i OTA tool...

www.b4x.com

if anyone has a working example of how to use the dos filter, show logs, block and unblock users and can share I appreciate it.

Thank you!

 

[Erel]

The updated link is: https://www.eclipse.org/jetty/documentation/current/dos-filter.html
It explains how it works and the various parameters.
The Dos filter must be explicitly added.

Blocking happens automatically as well as unblocking.