Teltonika RUT955 User Manual page 100

RUT955 User's Manual
7.6.7.4 HTTP Attack Prevention
An HTTP attack sends a complete, legitimate HTTP header, which includes a 'Content-Length' field to specify the
size of the message body to follow. However, the attacker then proceeds to send the actual message body at an
extremely slow rate (e.g. 1 byte/110 seconds.) Due to the entire message being correct and complete, the target server
will attempt to obey the 'Content-Length' field in the header, and wait for the entire body of the message to be
transmitted, hence slowing it down.
Field Name
1. Enable HTTP limit
2. Limit period
3. Limit
4. Limit burst
7.6.7.5 HTTPS Attack Prevention
Field Name
1. Enable HTTPS limit
2. Limit period
3. Limit
4. Limit burst
Teltonika Solutions
Possible values
Enable/Disable
Second/Minute/Hour/Day
Integer number
Integer number
Possible values
Enable/Disable
Second/Minute/Hour/Day
Integer number
Integer number
Explanation
Limits HTTP connections per set period of time
The period in which HTTP connections are to be limited
Maximum HTTP connections during the set period
The maximum burst before the above limit kicks in
Explanation
Limits HTTPS connections per set period of time
The period in which HTTPS connections are to be limited
Maximum HTTPS connections during the set period
The maximum burst before the above limit kicks in
100