tune ddos protection settings [ci skip]

This commit is contained in:
Viktor Barzin 2025-01-16 22:49:40 +00:00
parent d1e0e2c5c7
commit ca9765ebba

View file

@ -88,9 +88,9 @@ resource "kubernetes_ingress_v1" "proxied-ingress" {
"nginx.ingress.kubernetes.io/proxy-buffering" : "on"
# DDOS protection
"nginx.ingress.kubernetes.io/limit-connections" : 5
"nginx.ingress.kubernetes.io/limit-rps" : 2
"nginx.ingress.kubernetes.io/limit-rpm" : 5
"nginx.ingress.kubernetes.io/limit-connections" : 500
"nginx.ingress.kubernetes.io/limit-rps" : 10
"nginx.ingress.kubernetes.io/limit-rpm" : 10
"nginx.ingress.kubernetes.io/limit-burst-multiplier" : 10
"nginx.ingress.kubernetes.io/limit-rate-after" : 10
"nginx.ingress.kubernetes.io/configuration-snippet" = <<-EOF