Enable hidden service intro DoS defense

This commit is contained in:
Daniel Winzen
2020-01-11 12:56:20 +01:00
parent 0bb35ae263
commit a69714bce8
2 changed files with 10 additions and 1 deletions

View File

@ -60,6 +60,9 @@ HiddenServicePort 5049
HiddenServicePort 5050 HiddenServicePort 5050
HiddenServiceVersion 3 HiddenServiceVersion 3
HiddenServiceNumIntroductionPoints 5 HiddenServiceNumIntroductionPoints 5
HiddenServiceEnableIntroDoSDefense 1
HiddenServiceEnableIntroDoSRatePerSec 10
HiddenServiceEnableIntroDoSBurstPerSec 100
ClientUseIPv6 1 ClientUseIPv6 1
ClientUseIPv4 1 ClientUseIPv4 1

View File

@ -384,8 +384,14 @@ HiddenServiceNumIntroductionPoints $tmp[num_intros]
HiddenServiceVersion $tmp[version] HiddenServiceVersion $tmp[version]
HiddenServiceMaxStreamsCloseCircuit 1 HiddenServiceMaxStreamsCloseCircuit 1
HiddenServiceMaxStreams $tmp[max_streams] HiddenServiceMaxStreams $tmp[max_streams]
HiddenServicePort 80 unix:/var/run/nginx/$socket
"; ";
if($tmp['version']=='3'){
$torrc.="HiddenServiceEnableIntroDoSDefense 1
HiddenServiceEnableIntroDoSRatePerSec 10
HiddenServiceEnableIntroDoSBurstPerSec 100
";
}
$torrc.="HiddenServicePort 80 unix:/var/run/nginx/$socket\n";
if($tmp['enable_smtp']){ if($tmp['enable_smtp']){
$torrc.="HiddenServicePort 25\n"; $torrc.="HiddenServicePort 25\n";
} }