diff options
| -rw-r--r-- | manifests/vserver.pp | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/manifests/vserver.pp b/manifests/vserver.pp index 02448da..67ece43 100644 --- a/manifests/vserver.pp +++ b/manifests/vserver.pp @@ -3,6 +3,16 @@ class nodo::vserver inherits nodo { include timezone include syslog-ng::vserver + # SSL computational DoS mitigation + # See http://vincent.bernat.im/en/blog/2011-ssl-dos-mitigation.html + $firewall_ssl_ratelimit = $firewall_ssl_ratelimit ? { + '' => $firewall_global_ssl_ratelimit ? { + '' => '-', + default => $firewall_global_ssl_ratelimit, + }, + default => $firewall_ssl_ratelimit, + } + backupninja::sys { "sys": ensure => present, partitions => false, |