Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Whitelisting from nftables #844

Closed
krizhanovsky opened this issue Sep 19, 2017 · 1 comment
Closed

Whitelisting from nftables #844

krizhanovsky opened this issue Sep 19, 2017 · 1 comment
Assignees
@aleksostapenko
Labels
enhancement security
Milestone
0.5 alpha

Comments

@krizhanovsky
Copy link
Contributor

krizhanovsky commented Sep 19, 2017 •
edited
Loading

Frang and especially sticky cookies modules may significantly impact user experience and the site availability for search engines, so we need a whitelist for IP addresses which should not be impacted by Frang and sticky cookies. Bot the modules must introduce a new options to bypass traffic with specified label.

The new configuration option must be defined as

    whilelist_mark <mark>

, where is an integer value set in skb->mark by nftables.

Please create an issue for appropriate functional test (for the next milestone) and add corresponding description to https://github.com/tempesta-tech/tempesta/wiki/Handling-clients
@krizhanovsky krizhanovsky added this to the 1.0 WebOS milestone Sep 19, 2017
@krizhanovsky krizhanovsky modified the milestones: backlog, 0.5 alpha Jan 14, 2018
@krizhanovsky krizhanovsky mentioned this issue Jan 14, 2018
Closed
@krizhanovsky krizhanovsky modified the milestones: 1.0 Tempesta OS, 0.5 alpha Feb 5, 2018
@aleksostapenko aleksostapenko mentioned this issue Feb 17, 2018
Closed
@aleksostapenko
Copy link
Contributor

Wiki has been updated and issue for functional test has been created: #917.

aleksostapenko added a commit that referenced this issue Mar 1, 2018
@aleksostapenko
Merge pull request #913 from tempesta-tech/ao-844
9381703 
Fix #844: Avoid frang and sticky processing for whitelist requests.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@aleksostapenko aleksostapenko

Labels
enhancement security
Projects
None yet
Milestone
0.5 alpha
Development

No branches or pull requests
2 participants
@krizhanovsky @aleksostapenko