Closed
Bug 1911202
Opened 1 year ago
Closed 1 year ago
Remove support for iprepd from the BMO code base as it is not being used since the move to GCP
Categories
(bugzilla.mozilla.org :: Infrastructure, task)
Tracking
()
RESOLVED
FIXED
People
(Reporter: dkl, Assigned: dkl)
Details
Attachments
(1 file)
We are sending requests for login and mfa failures to the old iprepd endpoint but no real protection is happening. So we should disable the feature, remove the code and look for an alternative solution for customized rate limiting.
One main feature of iprepd, we could send types of violations based on userid instead of ip address which allowed us to block the brute forcing of a specific account from multiple ip addresses.
|
Assignee | |
Comment 1•1 year ago
|
||
Original endpoint docs:
https://github.com/mozilla-services/iprepd
|
|
Assignee | |
Updated•1 year ago
|
Status: NEW → ASSIGNED
Summary: Remove support for iprepd from the BMO code base as I understand it from Ops it is not being used since the move to GCP → Remove support for iprepd from the BMO code base as it is not being used since the move to GCP
|
|
Assignee | |
Comment 2•1 year ago
|
||
Anywhere where I can, I will mimic what iprepd was giving us directly in the BMO code using the current rate limiting functionality.
|
||
Comment 3•1 year ago
|
||
|
|
Assignee | |
Comment 4•1 year ago
|
||
Status: ASSIGNED → RESOLVED
Closed: 1 year ago
Resolution: --- → FIXED
You need to log in
before you can comment on or make changes to this bug.
Description
•