OPNsense Forum

English Forums => Intrusion Detection and Prevention => Topic started by: blackout on March 21, 2021, 08:48:47 PM

Title: IDP and HAProxy
Post by: blackout on March 21, 2021, 08:48:47 PM
Hi,

is there a way that these components work together?
Today there was a massive brute force attak to my nextcloud and there was no other way as close the https port. In front of my nextcloud there is OPNsense with HAProxy as reverse proxy with SSL offloading.
So no encrypted traffic.

Regards

Title: Re: IDP and HAProxy
Post by: sorano on March 22, 2021, 09:31:57 PM
You could apply rate-limiting in HAProxy to block the bruteforce attempts, something like:
https://www.loadbalancer.org/blog/simple-denial-of-service-dos-attack-mitigation-using-haproxy-2/