Possible protection mechanisms on web server or network traffic level

Overview

Intentional or unintentional massive multiple requests to Okapi and modules that are not protected by permissions can cause denials of service. The purpose of this spike is to do investigation if malicious multiple requests can be filtered outside the FOLIO application level without harming valid requests nor restrict any functionality.

This page is to collect and document tool findings and working configurations.

List of findings to investigate:

• NGINX: Limiting Access to Proxied HTTP Resources