Rack::Attack: Protect your app with this one weird gem!
summary
Built at Kickstarter and published as the Rack::Attack gem to throttle and block abusive HTTP requests, it implements throttles keyed by IP or parameter, increments counters in memcache or redis, and uses time-bucketed keys like ten requests every five seconds or login limits such as five per twenty seconds. A one-line throttle for pledge edits stops a kicksniper attack that drove master DB CPU above thirty percent and immediately returns CPU to normal.
AI-written summary · about
chapters (16)
- 0:00Introduction
- 3:56The origin story
- 6:32Rack middleware
- 14:42Kick Sniper
- 14:54Reward Sniping
- 18:54The Results
- 19:56Pro Tips
- 20:15New Throttle
- 22:19Blacklist
- 22:38Example blacklist
- 23:38Star of the trolls
- 25:10Active support notifications
- 25:45Where does RackAttack fit in
- 26:29Its Ruby
- 27:13Thank you
- 27:58Wrap up
related talks
35mStuck in the Middle: Leverage the power of Rack Middleware
33mRack ‘em, Stack ‘em Web Apps
24mRampart: Protecting Web Applications from CPU-Exhaustion Denial-of-Service Attacks
27mLayered Security
27mRails Against the Machine
42mRunning at 99% Surviging an Application DoS
37m"How to Hijack, Proxy and Smuggle Sockets with Rack/Ruby"
44mRuby Web Application Security Defense in Depth