Blocking IP addresses Load Balanced Cluster

Posted by Dom on Server Fault See other posts from Server Fault or by Dom
Published on 2009-04-01T06:25:48Z Indexed on 2010/04/06 11:03 UTC
Read the original article Hit count: 199

Filed under:

haproxy

|

dos

|

ddos

|

Cloud

|

amazon-ec2

Hi

We're using HAproxy as a front end load balancer / proxy and are looking for solutions to block random IP addresses from jamming the cluster.

Is anyone familiar with a conf for HAProxy that can block requests if they exceed a certain threshold from a single IP within a defined period of time. Or can anyone suggest a software solution which could be placed in front of HAProxy to handle this kind of blocking.

Thanks

Dom--

© Server Fault or respective owner

Related posts about haproxy

HA Proxy Stick-table and tcp-connection configuration

as seen on Server Fault - Search for 'Server Fault'
I am using HA Proxy HA-Proxy version 1.4.18 2011/09/16 I am trying to insert the following into /etc/init.d/haproxy.cfg file # Use General Purpose Couter (gpc) 0 in SC1 as a global abuse counter # Monitors the number of request sent by an IP over a period of 10 seconds stick-table type ip size 1m… >>> More
Rotate haproxy logs

as seen on Server Fault - Search for 'Server Fault'
I tried few things but still not able to rotate haproxy logs efficiently. I need to rotate logs when log files crosses 500 MB size. Considering haproxy is serving large no. of static tcp connections, I can not restart haproxy process though a reload is doable. Daily haproxy log file size normally… >>> More
could not bind socket while haproxy restart

as seen on Server Fault - Search for 'Server Fault'
I m restarting HAproxy by following command haproxy -f /etc/haproxy/haproxy.cfg -p /var/run/haproxy.pid -sf $(cat /var/run/haproxy.pid) but i get following message [ALERT] 183/225022 (9278) : Starting proxy appli1-rewrite: cannot bind socket [ALERT] 183/225022 (9278) : Starting proxy appli2-insert:… >>> More
Restarting Haproxy Gracefully

as seen on Server Fault - Search for 'Server Fault'
As per various blogs, HAproxy can be gracefully restarted using the following command: sudo haproxy -f /etc/haproxy/haproxy.cfg -p /var/run/haproxy.pid -sf $(cat /var/run/haproxy.pid) TO verify this, I had set up a apache bench script which contiguously sent message to haproxy. Ideally, whenever… >>> More
HAProxy: Display a "BADREQ" | BADREQ's by the thousands

as seen on Server Fault - Search for 'Server Fault'
My HAProxy Configuration. #HA-Proxy version 1.3.22 2009/10/14 Copyright 2000-2009 Willy Tarreau <[email protected]> global maxconn 10000 spread-checks 50 user haproxy group haproxy daemon stats socket /tmp/haproxy log localhost local0 log localhost local1 notice defaults … >>> More

Related posts about dos

Play Your Favorite DOS Games in XP, Vista, and Windows 7

as seen on How to geek - Search for 'How to geek'
Want to take a trip down memory lane with old school DOS games? D-Fend Reloaded makes it easy for you to play your favorite DOS games directly on XP, Vista, and Windows 7. D-Fend Reloaded is a great frontend for DOSBox, the popular DOS emulator. It lets you install and run many DOS games… >>> More
Copy a file to a new directory path in DOS

as seen on Super User - Search for 'Super User'
How can I copy a file using DOS commands into a directory structure that may not yet exist? I need to be able to force the creation of the directory path to the target file location if that location doesn't already exist. For example, there is already a file.txt in this location: C:\file.txt And… >>> More
How to run a command as admin in MSDos?

as seen on Super User - Search for 'Super User'
I want to run a dos command in dos prompt, but this dos command is only executed using admin right. So, I can right click the command prompt to run as administrator, but I wanna to run one line of dos command using the admin right, can I run dos command in dos prompt like sudo in DOS cmd? thz u. >>> More
Copy a file to a new directory path in DOS

as seen on Stack Overflow - Search for 'Stack Overflow'
How can I copy a file using DOS commands into a directory structure that may not yet exist? I need to be able to force the creation of the directory path to the target file location if that location doesn't already exist. For example, there is already a file.txt in this location: C:\file.txt And… >>> More
The Dos and Don'ts of Database Indexing

as seen on Internet.com - Search for 'Internet.com'
The creation of database indexes is the last thing developers and database designers think about--almost an afterthought. Greg Larsen shows you some of the dos and don'ts of indexing to help you pick reasonable indexes at design time. >>> More