From 1421869d6611052a4b5c4e147dc755ca20b19a05 Mon Sep 17 00:00:00 2001 From: Jens Schedel Date: Wed, 11 Dec 2024 10:44:14 +0100 Subject: [PATCH] Increase client connection limit to match ddos protection The default for the maximum number of client connections is 400 according to https://github.com/hyperledger/indy-plenum/blob/main/plenum/config.py#L289 But the ddos protection (run/add_ddos_protection_iptables_rule.sh) defaults to 1500 maximum connections. This discrepancy makes indy-node still susceptible to ddos attacks. Signed-off-by: Jens Schedel --- run/etc_indy/indy_config.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/run/etc_indy/indy_config.py b/run/etc_indy/indy_config.py index d7a8db6..7aed010 100644 --- a/run/etc_indy/indy_config.py +++ b/run/etc_indy/indy_config.py @@ -22,6 +22,8 @@ # For running indy >= 1.13 in a legacy network (i.e. including revocation transactions written by indy nodes < 1.13) REV_STRATEGY_USE_COMPAT_ORDERING=True +MAX_CONNECTED_CLIENTS_NUM=1600 + ## Logging # 0 means everything logLevel = 20