Skip to content

Commit

Permalink
FEATURE increase rate limits
Browse files Browse the repository at this point in the history
  • Loading branch information
vbaranovskiy-plesk authored and Maksim Savrilov committed Feb 15, 2024
1 parent 18d6d2d commit 4493396
Show file tree
Hide file tree
Showing 3 changed files with 60 additions and 2 deletions.
2 changes: 1 addition & 1 deletion test/config-next/ra.json
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
{
"ra": {
"rateLimitPoliciesFilename": "test/rate-limit-policies.yml",
"rateLimitPoliciesFilename": "test/rate-limit-policies-b.yml",
"maxContactsPerRegistration": 3,
"hostnamePolicyFile": "test/hostname-policy.yaml",
"maxNames": 100,
Expand Down
2 changes: 1 addition & 1 deletion test/config/ra.json
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
{
"ra": {
"rateLimitPoliciesFilename": "test/rate-limit-policies.yml",
"rateLimitPoliciesFilename": "test/rate-limit-policies-b.yml",
"maxContactsPerRegistration": 3,
"debugAddr": ":8002",
"hostnamePolicyFile": "test/hostname-policy.yaml",
Expand Down
58 changes: 58 additions & 0 deletions test/rate-limit-policies-b.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,58 @@
# See cmd/shell.go for definitions of these rate limits.
certificatesPerName:
window: 2160h
threshold: 999
overrides:
ratelimit.me: 1
lim.it: 0
# Hostnames used by the letsencrypt client integration test.
le.wtf: 99999
le1.wtf: 99999
le2.wtf: 99999
le3.wtf: 99999
le4.wtf: 99999
nginx.wtf: 99999
good-caa-reserved.com: 99999
bad-caa-reserved.com: 99999
ecdsa.le.wtf: 99999
must-staple.le.wtf: 99999
plesk.tech: 9999999
atf.plesk.tech: 9999999
registrationOverrides:
101: 1000
registrationsPerIP:
window: 168h # 1 week
threshold: 9999
overrides:
127.0.0.1: 999990
registrationsPerIPRange:
window: 168h # 1 week
threshold: 99999
overrides:
127.0.0.1: 1000000
pendingAuthorizationsPerAccount:
window: 168h # 1 week, should match pending authorization lifetime.
threshold: 9999
newOrdersPerAccount:
window: 3h
threshold: 99999
certificatesPerFQDNSet:
window: 168h
threshold: 99999
overrides:
le.wtf: 99999
le1.wtf: 99999
le2.wtf: 99999
le3.wtf: 99999
le.wtf,le1.wtf: 99999
good-caa-reserved.com: 99999
nginx.wtf: 99999
ecdsa.le.wtf: 99999
must-staple.le.wtf: 99999
plesk.tech: 9999999
atf.plesk.tech: 9999999
certificatesPerFQDNSetFast:
window: 2h
threshold: 20
overrides:
le.wtf: 99

0 comments on commit 4493396

Please sign in to comment.