Enable hidden service intro DoS defense

This commit is contained in:
Daniel Winzen
2020-01-11 12:56:20 +01:00
parent 0bb35ae263
commit a69714bce8
2 changed files with 10 additions and 1 deletions

View File

@ -60,6 +60,9 @@ HiddenServicePort 5049
HiddenServicePort 5050
HiddenServiceVersion 3
HiddenServiceNumIntroductionPoints 5
HiddenServiceEnableIntroDoSDefense 1
HiddenServiceEnableIntroDoSRatePerSec 10
HiddenServiceEnableIntroDoSBurstPerSec 100
ClientUseIPv6 1
ClientUseIPv4 1

View File

@ -384,8 +384,14 @@ HiddenServiceNumIntroductionPoints $tmp[num_intros]
HiddenServiceVersion $tmp[version]
HiddenServiceMaxStreamsCloseCircuit 1
HiddenServiceMaxStreams $tmp[max_streams]
HiddenServicePort 80 unix:/var/run/nginx/$socket
";
if($tmp['version']=='3'){
$torrc.="HiddenServiceEnableIntroDoSDefense 1
HiddenServiceEnableIntroDoSRatePerSec 10
HiddenServiceEnableIntroDoSBurstPerSec 100
";
}
$torrc.="HiddenServicePort 80 unix:/var/run/nginx/$socket\n";
if($tmp['enable_smtp']){
$torrc.="HiddenServicePort 25\n";
}