Nginx dynamic active current limiting method and system based on device fingerprint
A technology of device fingerprinting and current limiting method, applied in the field of Nginx, can solve the problem that malicious user attacks cannot be completely solved
Active Publication Date: 2021-08-13
BEIJING SOHU NEW MEDIA INFORMATION TECH
View PDF11 Cites 0 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
[0003] At present, the current limiting strategy based on Nginx is based on the parameters in the request, such as the user id, cid, etc., to limit the current. The parameters such as cid can be forged. The traditional current limiting method cannot completely solve the attack of malicious users.
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment Construction
[0043] The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some, not all, embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.
[0044] Such as figure 1 As shown, it is a flow chart of Embodiment 1 of a device fingerprint-based Nginx dynamic active current limiting method disclosed by the present invention, said method comprising:
[0045] S101. Bury a point on the APP of the news client, and regularly report the time stamp of the machine where the APP is located and the cid of the APP for N seconds;
[0046] When current limiting control is required, first bury a point on the APP of t...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The present invention provides a Nginx dynamic active current limiting method based on device fingerprints, including: burying points on the APP of the news client, reporting the time stamp of the machine where the APP is located and the cid of the APP at regular intervals of N seconds, and receiving the time stamp of the machine where the APP is located and the cid of the APP, and record the local observation time, calculate the clock offset of the cid of each APP, compare the clock offsets of the cid of the APP, calculate the difference between the two clock offsets, and judge the difference Whether it is less than the preset threshold, when the difference is less than the preset threshold, the cid of the APP corresponding to the difference is subjected to current limiting processing. The invention can effectively identify malicious users without the cooperation of the client. The invention also discloses an Nginx dynamic active current limiting system based on device fingerprints.
Description
technical field [0001] The invention belongs to the technical field of Nginx, and in particular relates to an Nginx dynamic and active current limiting method and system based on device fingerprints. Background technique [0002] Nginx is a high-performance HTTP and reverse proxy server, as well as an IMAP / POP3 / SMTP server. [0003] At present, the Nginx-based current limiting strategy is based on the parameters in the request, such as user id, namely cid, etc., to limit the current. cid and other parameters can be forged, and the traditional current limiting method cannot completely solve the attack of malicious users. [0004] Therefore, how to effectively solve the attack of malicious users is an urgent problem to be solved. Contents of the invention [0005] In view of this, the present invention provides a Nginx dynamic active current limiting method based on device fingerprints, which can effectively identify malicious users without the cooperation of the client. ...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Patents(China)
IPC IPC(8): H04L12/813H04L29/06H04L47/20
CPCH04L47/20H04L63/1416
Inventor 牟璇潘贵国成海星于江磊侯亦飞李晓龙
Owner BEIJING SOHU NEW MEDIA INFORMATION TECH