Daniel Micay cd59960e7b move IP-based SSH connection limits to nftables ... We use synproxy for establishing all new connections to the SSH port and enforce a connection limit between synproxy and the standard network stack. Once the connection limit is reached, it's also enforced for new connections at the synproxy layer. This avoids creating conntrack and connection limit set entries until connections are already established to avoid packets with spoofed source addresses exhausting these limited size tables. Primary servers using SSH to mirror TLS certificates to their replicas are allowlisted.		2024-03-28 11:38:03 -04:00
..
ssh_config	raise ssh background traffic priority to af11	2023-08-14 23:32:00 -04:00
sshd_config	move IP-based SSH connection limits to nftables	2024-03-28 11:38:03 -04:00