Преглед изворни кода

Increases WAF rate limit to accomodate higher usage from zscalar endpoints

To be tagged v3.1.4
Fred Damstra [afs macbook] пре 3 година
родитељ
комит
91a2270beb
1 измењених фајлова са 2 додато и 1 уклоњено
  1. 2 1
      submodules/wafv2/waf.tf

+ 2 - 1
submodules/wafv2/waf.tf

@@ -118,10 +118,11 @@ module "wafv2" {
   ]
 
   # A rate-based rule tracks the rate of requests for each originating IP address, and triggers the rule action when the rate exceeds a limit that you specify on the number of requests in any 5-minute time span
+  # zscalar needs high rates
   ip_rate_based_rule = {
     name     = "Rate_Limit"
     priority = 200
-    limit    = 900 # 900 requests per 5 minutes= 3 requests/second (sustained for 5 minutes)
+    limit    = 3000 # 6000 requests per 5 minutes= 10 requests/second (sustained for 5 minutes)
     action   = "block"
   }