• Our team is looking to connect with folks who use email services provided by Plesk, or a premium service. If you'd like to be part of the discovery process and share your experiences, we invite you to complete this short screening survey. If your responses match the persona we are looking for, you'll receive a link to schedule a call at your convenience. We look forward to hearing from you!
  • We are looking for U.S.-based freelancer or agency working with SEO or WordPress for a quick 30-min interviews to gather feedback on XOVI, a successful German SEO tool we’re looking to launch in the U.S.
    If you qualify and participate, you’ll receive a $30 Amazon gift card as a thank-you. Please apply here. Thanks for helping shape a better SEO product for agencies!
  • The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.

Question What is a sensible number of connections ip address for antiddos ?

Linulex

Silver Pleskian
Server operating system version
alma 8 and centos 7
Plesk version and microupdate number
18.0.52 Update #3
Hello all,

I am trying to set an antiddos policy for our servers in nginx because the number of scans have dramaticly increased. Mostly wordpress sites are scanned.
This is done via

Code:
limit_conn_zone $binary_remote_addr zone=antiddos:10m;
limit_conn antiddos 100;

The above configuration means that 100 connections are allowed from the same ip address at any given time. Any more the 100 error 503 is given.

100 is a number i made up, i have no idea if that is to small or to big. What would be a number that would websites allow to work, but stop scanners from hogging all the recources? The biggest servers have 2 to 300 wordpress websites on them.

For people who waht to do this to:

Add the above lines to a file in /etc/nginx/conf.d/ and give the extension .conf

for example /etc/nginx/conf.d/antiddos.conf and restart nginx service.

Condition: nginx should be active, either as proxy or a webserver.

Thank you

Regards
Jan
 
Back
Top