]> git.ipfire.org Git - thirdparty/haproxy.git/commit
[MEDIUM] add support for global.maxconnrate to limit the per-process conn rate.
authorWilly Tarreau <w@1wt.eu>
Wed, 7 Sep 2011 13:17:21 +0000 (15:17 +0200)
committerWilly Tarreau <w@1wt.eu>
Wed, 7 Sep 2011 20:47:42 +0000 (22:47 +0200)
commit81c25d0ee62fa93ea7a72bdf3d163b0604476065
tree419c97a8378571a0b4273f58be282ef5adcd3e2a
parent91886b692a743a63c3f25aca65bac3f2dc7c38bd
[MEDIUM] add support for global.maxconnrate to limit the per-process conn rate.

This one enforces a per-process connection rate limit, regardless of what
may be set per frontend. It can be a way to limit the CPU usage of a process
being severely attacked.

The side effect is that the global process connection rate is now measured
for each incoming connection, so it will be possible to report it.
doc/configuration.txt
include/proto/proxy.h
include/types/global.h
src/cfgparse.c
src/dumpstats.c
src/stream_sock.c