Rack Attack

यह प्रोजेक्ट Ruby वेब एप्लिकेशन्स के लिए एक Rack मिडलवेयर रेट लिमिटर और एप्लिकेशन लेयर फ़ायरवॉल है। यह कस्टम रूल्स के आधार पर HTTP रिक्वेस्ट्स को थ्रॉटल और ब्लॉक करने के लिए एक सुरक्षा परत के रूप में कार्य करता है, जो वेब सर्वर्स को आपत्तिजनक ट्रैफ़िक से बचाता है।

यह सिस्टम IP ब्लॉकिंग और दुर्भावनापूर्ण क्लाइंट्स को बैन करने की क्षमता प्रदान करता है। यह विश्वसनीय उपयोगकर्ताओं के लिए प्रतिबंधों को बायपास करने के लिए रिक्वेस्ट सेफ़लिस्टिंग लागू करता है और रिक्वेस्ट फ़्रीक्वेंसी को नियंत्रित करने के लिए टाइम-विंडो रेट लिमिटिंग का उपयोग करता है।

यह मिडलवेयर ट्रैफ़िक मैनेजमेंट और मॉनिटरिंग को कवर करता है, जिसमें रिक्वेस्ट पैटर्न को ट्रैक करने और रियल-टाइम में ट्रैफ़िक इवेंट्स को इंस्ट्रूमेंट करने की क्षमता शामिल है। यह रिक्वेस्ट्स के ब्लॉक या थ्रॉटल होने पर रिस्पॉन्स बॉडी और हेडर को कस्टमाइज़ करने की भी अनुमति देता है।

Features

Client Request Quotas - Implements per-client request quotas using unique discriminators to prevent system exhaustion from abusive traffic.
Rack-Based Middleware Pipelines - Implements a Rack-based middleware pipeline to intercept and filter HTTP requests before they reach the application.
Key-Value Stores - Uses a key-value store backend to persist request counts and timestamps across multiple server processes.
Per-Client Request Throttlers - Limits the number of requests a specific user or IP address can make within a sliding time window.
Automated IP Banning - Automatically blocks clients who repeatedly trigger filters using immediate bans or retry thresholds.
Client Discriminators - Implements unique client identification by extracting attributes like IP addresses or user IDs to apply targeted limits.
Malicious Traffic Blocking - Rejects incoming HTTP requests from forbidden IP addresses or users based on predefined security rules.
IP Blocking Middleware - Implements a security layer that rejects incoming HTTP traffic from forbidden IP addresses or malicious users.
Rate Limiting & Abuse Prevention - Implements mechanisms to prevent service abuse through application-layer traffic throttling and malicious request detection.
Request Blocking - Provides the ability to reject requests from forbidden IP addresses or those matching custom security rules.
Backend Security Middleware - Provides a modular security middleware layer to filter and block abusive traffic before it reaches core logic.
Web Application Firewalls - Functions as a web application firewall by safelisting, banning, and tracking request patterns to protect servers.
Predicate-Based Request Filtering - Evaluates incoming requests against predefined predicates to determine whether they should be blocked or allowed.
Time-Windowed Limits - Calculates request frequency over sliding or fixed time periods to restrict the number of allowed operations.
Middleware Rate Limiters - Provides a Rack middleware rate limiter for Ruby applications that throttles and blocks requests based on custom rules.
API Rate Limiting - Controls the frequency of requests to an API using unique identifiers like email addresses or IPs.
Request Safelisting - Allows trusted users or IP addresses to bypass all blocking and throttling rules.
Request Pattern Monitoring - Measures requests matching specific attributes to track patterns without affecting processing flow or blocking clients.
Traffic Event Instrumentation - Logs and graphs abusive activity in real-time by subscribing to internal middleware notifications.
Rule Match Notifications - Triggers internal events when rules are matched so that external logging or monitoring systems can record activity.
Request Traffic Monitors - Tracks incoming request volume and patterns in real time to identify abusive activity and security threats.
Deployment and Automation - Middleware for blocking and throttling malicious requests.
Ruby Frameworks and Tools - Rack middleware for blocking abusive requests.
सुरक्षा और गोपनीयता - Rack middleware for blocking and throttling requests.

स्टार हिस्ट्री

kickstarterrack-attack

Name: kickstarter/rack-attack
Author: kickstarter

View on GitHub

5,744 स्टार्स344 फोर्क्सRubyMIT5 व्यूज़

Rack Attack

Features

Client Request Quotas - Implements per-client request quotas using unique discriminators to prevent system exhaustion from abusive traffic.
Rack-Based Middleware Pipelines - Implements a Rack-based middleware pipeline to intercept and filter HTTP requests before they reach the application.
Key-Value Stores - Uses a key-value store backend to persist request counts and timestamps across multiple server processes.
Per-Client Request Throttlers - Limits the number of requests a specific user or IP address can make within a sliding time window.
Automated IP Banning - Automatically blocks clients who repeatedly trigger filters using immediate bans or retry thresholds.
Client Discriminators - Implements unique client identification by extracting attributes like IP addresses or user IDs to apply targeted limits.
Malicious Traffic Blocking - Rejects incoming HTTP requests from forbidden IP addresses or users based on predefined security rules.
IP Blocking Middleware - Implements a security layer that rejects incoming HTTP traffic from forbidden IP addresses or malicious users.
Rate Limiting & Abuse Prevention - Implements mechanisms to prevent service abuse through application-layer traffic throttling and malicious request detection.
Request Blocking - Provides the ability to reject requests from forbidden IP addresses or those matching custom security rules.
Backend Security Middleware - Provides a modular security middleware layer to filter and block abusive traffic before it reaches core logic.
Web Application Firewalls - Functions as a web application firewall by safelisting, banning, and tracking request patterns to protect servers.
Predicate-Based Request Filtering - Evaluates incoming requests against predefined predicates to determine whether they should be blocked or allowed.
Time-Windowed Limits - Calculates request frequency over sliding or fixed time periods to restrict the number of allowed operations.
Middleware Rate Limiters - Provides a Rack middleware rate limiter for Ruby applications that throttles and blocks requests based on custom rules.
API Rate Limiting - Controls the frequency of requests to an API using unique identifiers like email addresses or IPs.
Request Safelisting - Allows trusted users or IP addresses to bypass all blocking and throttling rules.
Request Pattern Monitoring - Measures requests matching specific attributes to track patterns without affecting processing flow or blocking clients.
Traffic Event Instrumentation - Logs and graphs abusive activity in real-time by subscribing to internal middleware notifications.
Rule Match Notifications - Triggers internal events when rules are matched so that external logging or monitoring systems can record activity.
Request Traffic Monitors - Tracks incoming request volume and patterns in real time to identify abusive activity and security threats.
Deployment and Automation - Middleware for blocking and throttling malicious requests.
Ruby Frameworks and Tools - Rack middleware for blocking abusive requests.
सुरक्षा और गोपनीयता - Rack middleware for blocking and throttling requests.

Rack Attack के ओपन-सोर्स विकल्प

समान ओपन-सोर्स प्रोजेक्ट्स, जो Rack Attack के साथ साझा की गई सुविधाओं के आधार पर रैंक किए गए हैं।

rack/rack-attack
rack/rack-attack
5,746GitHub पर देखें
Rack-attack is a middleware rate limiter and request filter for the Rack interface. It provides a system for throttling HTTP requests and maintaining IP address blocklists to protect applications from malicious traffic and denial-of-service attacks. The project enables application layer DDoS mitigation and API rate limit management by identifying and rejecting requests from banned clients or abusive IP addresses. It allows for the definition of safelists to bypass filters and uses custom logic to determine if a client should be blocked or throttled. The tool covers comprehensive traffic mana
Rubyrackrack-attackrack-middleware
GitHub पर देखें5,746
jhurliman/node-rate-limiter
jhurliman/node-rate-limiter
1,561GitHub पर देखें
Node-rate-limiter is a utility library for Node.js designed to throttle both incoming and outgoing traffic using configurable time intervals and token bucket limits. It protects server capacity and backend APIs by capping the number of requests an individual client can make within a specified time window, while also controlling the frequency of outbound API calls and web crawling tasks to avoid triggering remote rate limit violations. The library implements a token-bucket rate limiting algorithm with continuous replenishment, allowing administrators to configure specific burst and drip rates.
TypeScript
GitHub पर देखें1,561
corazawaf/coraza
corazawaf/coraza
3,295GitHub पर देखें
Coraza is a web application firewall engine designed to filter malicious HTTP traffic using standardized security directives. It functions as a library for embedding request filtering and security transaction processing directly into web servers or reverse proxies. The engine implements the ModSecurity WAF engine and the OWASP Core Rule Set to identify and block common web attack patterns. It utilizes a library-first integration model, allowing security capabilities to be embedded into a host process as a dependency rather than running as a standalone proxy. The project covers rule-based pat
Gocorazacoraza-wafcoreruleset
GitHub पर देखें3,295
mitchellkrogza/nginx-ultimate-bad-bot-blocker
mitchellkrogza/nginx-ultimate-bad-bot-blocker
4,750GitHub पर देखें
This project is a collection of configuration files and scripts serving as a bot blocker and security middleware for Nginx. It functions as an automated blocklist manager that filters malicious user-agents and IP addresses to mitigate vulnerability scanning, login brute-forcing, and DDoS attacks. The system distinguishes itself by automating the maintenance of security rules, downloading updated bot definitions and reloading the server on a schedule. It also includes a search engine spam filter capable of generating robots.txt files and link disavow lists to prevent malicious domains from imp
Shelladwarebot-blockerbots
GitHub पर देखें4,750

Rack Attack के सभी 30 विकल्प देखें

अक्सर पूछे जाने वाले प्रश्न

kickstarter/rack-attack क्या करता है?

kickstarter/rack-attack की मुख्य विशेषताएं क्या हैं?

kickstarter/rack-attack की मुख्य विशेषताएं हैं: Client Request Quotas, Rack-Based Middleware Pipelines, Key-Value Stores, Per-Client Request Throttlers, Automated IP Banning, Client Discriminators, Malicious Traffic Blocking, IP Blocking Middleware।

kickstarter/rack-attack के कुछ ओपन-सोर्स विकल्प क्या हैं?

kickstarter/rack-attack के ओपन-सोर्स विकल्पों में शामिल हैं: rack/rack-attack — Rack-attack is a middleware rate limiter and request filter for the Rack interface. It provides a system for… jhurliman/node-rate-limiter — Node-rate-limiter is a utility library for Node.js designed to throttle both incoming and outgoing traffic using… corazawaf/coraza — Coraza is a web application firewall engine designed to filter malicious HTTP traffic using standardized security… mitchellkrogza/nginx-ultimate-bad-bot-blocker — This project is a collection of configuration files and scripts serving as a bot blocker and security middleware for… unkeyed/unkey — Unkey is an API key management platform and gateway control plane designed for issuing, verifying, and revoking secure… azukaar/cosmos-server — Cosmos-Server is a self-hosted server platform that combines an authentication gateway, a reverse proxy with dynamic…

स्टार हिस्ट्री

अक्सर पूछे जाने वाले प्रश्न

kickstarter/rack-attack क्या करता है?

kickstarter/rack-attack की मुख्य विशेषताएं क्या हैं?

kickstarter/rack-attack के कुछ ओपन-सोर्स विकल्प क्या हैं?