View Issue Details

IDProjectCategoryView StatusLast Update
0005734Composrcore_configurationpublic2024-07-22 21:51
ReporterPatrick SchmalstigAssigned To 
SeverityFeature-request 
Status non-assignedResolutionopen 
Product Version 
Fixed in Version 
Summary0005734: XML advanced traffic rules
DescriptionImplement an XML configuration that can define advanced rules to perform on certain traffic to a Composr site.

Available criteria could be things like IP address (supporting wildcards), user agent, request/response headers, hostname, country/region (if geocoding is available), referrer, operating system, member, group, is staff, is administrator, is on probation, is guest, is bot, zone/page/type requested, GET/POST parameters, etc.

Available actions could include applying a specific rate limit, throttling (e.g. sleep the request?), serve / apply a static cache, redirecting, blocking the request, banning (as spammer according to configured time), banning (permanently, optional advanced banning type), requiring validation for submitted content, preventing login or account registration, requiring login, logging the request, enabling profiling for the request, treating the request under dev mode, etc.

Criteria should allow equals, does not equal (prefix with !), contains (prefix and/or suffix with *), or does not contain (prefix with ! followed by a prefix and/or suffix of *). Perhaps also allow regex.

We should possibly utilise a cache for this so we know which criteria if any a repeat request matched and what actions were applied (the goal is reducing resource use especially with having to repeatedly parse the XML). Cache is cleared individually after a period of time or as a whole when the XML is changed.
Additional InformationInspiration: Cloudflare WAF rules
TagsRoadmap: Sponsorship
Time estimation (hours)
Sponsorship open

Activities

Chris Graham

2024-07-22 21:43

administrator   ~0008883

This seems like an enormous amount of work to serve a small niche.
Let's say it took a month to do. What would help the Composr project grow more, a month implementing this, or a month sitting down with newbie users and watching what they do and tweaking things?

Patrick Schmalstig

2024-07-22 21:51

administrator   ~0008884

No idea why I tagged this as Over the Horizon and not Sponsorship... this was meant as a sponsorship idea

Issue History

Date Modified Username Field Change
2024-04-25 16:12 Patrick Schmalstig New Issue
2024-04-25 16:12 Patrick Schmalstig Tag Attached: Roadmap: Over the horizon
2024-04-25 16:13 Patrick Schmalstig Description Updated View Revisions
2024-04-25 16:39 Patrick Schmalstig Description Updated View Revisions
2024-04-25 16:39 Patrick Schmalstig Description Updated View Revisions
2024-04-25 16:41 Patrick Schmalstig Description Updated View Revisions
2024-07-22 21:43 Chris Graham Note Added: 0008883
2024-07-22 21:51 Patrick Schmalstig Note Added: 0008884
2024-07-22 21:51 Patrick Schmalstig Tag Detached: Roadmap: Over the horizon
2024-07-22 21:51 Patrick Schmalstig Tag Attached: Roadmap: Sponsorship