HN user

ktheory

96 karma

Aaron Suggs http://aaronsuggs.org/ http://twitter.com/ktheory

[ my public key: https://keybase.io/ktheory; my proof: https://keybase.io/ktheory/sigs/eN54aIKIRLfkPJeThaGML1uCjWFPynkDLFR4kOHAGlo ]

Posts5
Comments7
View on HN

(Kickstarter staff here.)

We did. Those are great projects.

Personally, I see Vault having a lot of community momentum behind it; and it can easily solve some complicated security infrastructure beyond storing secrets (the PKI, MySQL & ssh secret backends are particularly compelling).

Yeah, iptables works great for that.

I also like nginx's limit_zone module. You can put limit_zone in the proxy stanza, and only throttle dynamic requests without throttling access to fast static files.

We often use Rack::Attack to throttle particular HTTP paths differently. Say, the homepage isn't throttled, but the login action is. That layer 7 knowledge is Rack::Attack's main advantage.

As I say in the README, Rack::Attack is complementary to iptables and the limit_zone module.