mirror of
https://github.com/neondatabase/neon.git
synced 2026-05-25 00:50:36 +00:00
e5c50bb12b
## Problem Many users have access to ipv6 subnets (eg a /64). That gives them 2^64 addresses to play with ## Summary of changes Truncate the address to /64 to reduce the attack surface. Todo: ~~Will NAT64 be an issue here? AFAIU they put the IPv4 address at the end of the IPv6 address. By truncating we will lose all that detail.~~ It's the same problem as a host sharing IPv6 addresses between clients. I don't think it's up to us to solve. If a customer is getting DDoSed, then they likely need to arrange a dedicated IP with us.
8 lines
269 B
Rust
8 lines
269 B
Rust
mod aimd;
|
|
mod limit_algorithm;
|
|
mod limiter;
|
|
pub use aimd::Aimd;
|
|
pub use limit_algorithm::{AimdConfig, Fixed, RateLimitAlgorithm, RateLimiterConfig};
|
|
pub use limiter::Limiter;
|
|
pub use limiter::{BucketRateLimiter, EndpointRateLimiter, GlobalRateLimiter, RateBucketInfo};
|