diff options
| author | Silvio Rhatto <rhatto@riseup.net> | 2013-01-22 16:13:33 -0200 |
|---|---|---|
| committer | Silvio Rhatto <rhatto@riseup.net> | 2013-01-22 16:13:33 -0200 |
| commit | 59040148cccdb53f71ae99b36a2442c5970d45ac (patch) | |
| tree | da08512051d7027fb6eb33d6842d19d2f78bb8ec /manifests/vserver | |
| parent | 616d2575015a57407cd0a930b8cd16b0b29aecb6 (diff) | |
| download | puppet-nodo-59040148cccdb53f71ae99b36a2442c5970d45ac.tar.gz puppet-nodo-59040148cccdb53f71ae99b36a2442c5970d45ac.tar.bz2 | |
Changing ssl_ratelimit variable
Diffstat (limited to 'manifests/vserver')
| -rw-r--r-- | manifests/vserver/instance.pp | 10 |
1 files changed, 0 insertions, 10 deletions
diff --git a/manifests/vserver/instance.pp b/manifests/vserver/instance.pp index 7593c3f..90b0b0a 100644 --- a/manifests/vserver/instance.pp +++ b/manifests/vserver/instance.pp @@ -85,16 +85,6 @@ define nodo::vserver::instance($context, $ensure = 'running', $proxy = false, } } - # SSL computational DoS mitigation - # See http://vincent.bernat.im/en/blog/2011-ssl-dos-mitigation.html - $firewall_ssl_ratelimit = $firewall_ssl_ratelimit ? { - '' => $firewall_global_ssl_ratelimit ? { - '' => '-', - default => $firewall_global_ssl_ratelimit, - }, - default => $firewall_ssl_ratelimit, - } - # Apply firewall rules just for running vservers case $ensure { 'running': { |