|
|
| (One intermediate revision by the same user not shown) |
| Line 1: |
Line 1: |
| <div class="col-md-12"><br></div>
| | #REDIRECT [[Zimbra_NG_Modules/Zimbra_NG_Modules_and_the_Zimbra_DoSFilter]] |
| <div class="col-md-12"><br></div>
| |
| <ol class="breadcrumb">
| |
| <li>[[Main Page|Zimbra Wiki]]</li>
| |
| <li>[[Zimbra_Next_Generation_Modules]]</li>
| |
| <li class="active"> DoSFilter</li>
| |
| </ol>
| |
| __NOTOC__
| |
| <div class="col-md-12"><br /></div>
| |
| <div class="col-md-9">
| |
| <h2 class="title-header" style="padding-bottom: 9px; border-bottom: 4px solid #0087c3;">Zimbra Next Generation Modules - DoSFilter</h2>
| |
| <div class="col-md-12">
| |
| <div class="ibox-content">
| |
| <div class="post animated fadeInLeft animation-delay-8" style="padding-top:5px">
| |
| <div class="panel panel-default">
| |
| <div class="panel-body">
| |
| <h5 class="post-title">Zimbra Next Generation Modules - DoSFilter</h5>
| |
| <div class="row">
| |
| == The Zimbra DOS Filter ==
| |
| Starting from Zimbra 8.0.0, a connection throttling mechanism called DOS Filter has been added in order to reduce the impact of Denial of Service attacks. By default the DOS Filter only allows for 30 connections per second, rejecting any exceeding connection with a 503 HTTP error.
| |
| | |
| === How the DOS Filter can affect your Zimbra Next Generation Modules experience ===
| |
| Being an Administrative Zimlet, the Zimbra Next Generation Modules Administration Zimlet is loaded upon logging into the Zimbra Administration Console, and in order to retrieve all relevant data many requests are done. This can trigger Zimbra's DOS Filter, causing slowliness, AJAX Errors and general UI corruption (e.g. empty Text Boxes or incoherent checkbox state).
| |
| | |
| == Managing the DOS Filter ==
| |
| There are 3 different configuration properties controlling the DoS Filter:
| |
| | |
| === zimbraHttpDosFilterMaxRequestsPerSec ===
| |
| This property defines the number of allowed concurrent connections per client. The default is 30.
| |
| | |
| === zimbraHttpDosFilterDelayMillis ===
| |
| This property defines the delay imposed any connection that exceeds the allowed limit.
| |
| | |
| This property can be set to any integer value, which will become the delay imposed on exceeding connections or:
| |
| * "-1", which means "Reject"
| |
| * "0", which means "No Delay"
| |
| | |
| The default value is -1
| |
| | |
| === zimbraHttpThrottleSafeIPs ===
| |
| This property defines a list of "safe" IPs for which DoS Filter rules do not apply. Multiple addresses can be specified as a comma separated list.
| |
| | |
| {{Template:WarningBoxxy|All of this properties require a mailboxd service restart in order for any change to be applied}}
| |
| | |
| == Dealing with Zimbra Admin Console connection issues ==
| |
| If you are experiencing any of the issues described above, you can check if the cause is the DoS Filter by using your browser's Developer Tools before logging into the Zimbra Administration Console: if you can see any 503 errors then the DoS Filter has probably kicked in and is throttling the connections you are making to the Zimbra Administration Console.
| |
| | |
| In this case, you should either:
| |
| * Add your client IP to the '''zimbraHttpThrottleSafeIPs''' list (perfect if your client has a static IP address)
| |
| * Raise the number of allowed connections. According to our tests, 100 allowed connections per second should solve any loading issues (however, this depends by a number of different factors).
| |
| </div>
| |
| </div>
| |
| <div class="col-md-9">
| |
| <div class="panel-footer">
| |
| <p><i class="fa fa-clock-o"></i> Aug 25, 2016 - [https://www.zimbra.com/email-server-software/ Know more »]</p>
| |
| </div>
| |
| </div>
| |
| </div>
| |
| </div>
| |
| </div>
| |
| </div>
| |
| </div>
| |
| <div class="col-md-3"><br /></div>
| |
| <div class="col-md-3">
| |
| <div class="panel panel-zimbrared-light-border">
| |
| <div class="panel-heading">
| |
| <h3 class="panel-title"><i class="fa fa-gear pull-left"></i> Zimbra Next Generation Modules</h3>
| |
| </div>
| |
| <div class="panel-body">
| |
| {{ZNG}}
| |
| </div>
| |
| </div>
| |
| </div>
| |
| <div class="col-md-3">
| |
| <div class="panel panel-primary-light-border">
| |
| <div class="panel-heading">
| |
| <h3 class="panel-title"><i class="fa fa-info-circle pull-left"></i> Zimbra Next Generation Modules Resources</h3>
| |
| </div>
| |
| <div class="panel-body">
| |
| {{ZNGL}}
| |
| </div>
| |
| </div>
| |
| </div>
| |
| <div class="clearfix"></div>
| |
| <div class="col-md-12"><br></div>
| |
| {{FH}}
| |
