From ca9765ebbae0a47c70d81dc480f091c413e6e5a1 Mon Sep 17 00:00:00 2001 From: Viktor Barzin Date: Thu, 16 Jan 2025 22:49:40 +0000 Subject: [PATCH] tune ddos protection settings [ci skip] --- modules/kubernetes/ingress_factory/main.tf | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/modules/kubernetes/ingress_factory/main.tf b/modules/kubernetes/ingress_factory/main.tf index 0f361ef4..a1f14d82 100644 --- a/modules/kubernetes/ingress_factory/main.tf +++ b/modules/kubernetes/ingress_factory/main.tf @@ -88,9 +88,9 @@ resource "kubernetes_ingress_v1" "proxied-ingress" { "nginx.ingress.kubernetes.io/proxy-buffering" : "on" # DDOS protection - "nginx.ingress.kubernetes.io/limit-connections" : 5 - "nginx.ingress.kubernetes.io/limit-rps" : 2 - "nginx.ingress.kubernetes.io/limit-rpm" : 5 + "nginx.ingress.kubernetes.io/limit-connections" : 500 + "nginx.ingress.kubernetes.io/limit-rps" : 10 + "nginx.ingress.kubernetes.io/limit-rpm" : 10 "nginx.ingress.kubernetes.io/limit-burst-multiplier" : 10 "nginx.ingress.kubernetes.io/limit-rate-after" : 10 "nginx.ingress.kubernetes.io/configuration-snippet" = <<-EOF