IDP and HAProxy

[blackout]

Hi,

is there a way that these components work together?
Today there was a massive brute force attak to my nextcloud and there was no other way as close the https port. In front of my nextcloud there is OPNsense with HAProxy as reverse proxy with SSL offloading.
So no encrypted traffic.

Regards

[sorano]

You could apply rate-limiting in HAProxy to block the bruteforce attempts, something like:
https://www.loadbalancer.org/blog/simple-denial-of-service-dos-attack-mitigation-using-haproxy-2/