thojanssens1

thojanssens1

In Elixir and Phoenix applications, we tend to let it crash when there is an error and can’t return a meaningful response the user.

E.g. a controller action may try to fetch a user by id Users.get_user!(user_id) from a route param, and if not found, Phoenix.Ecto lib allows to convert the Ecto.NoResultsError error to a 404 http not found page.

However, when using an error tracking tool such as AppSignal, Sentry, etc. couldn’t that lead to many useless error reports, bloating the logs, e.g. in cases where there are bots frequently trying to requesting URLs with wrong route params?

What about DDoS attacks against URLs with wrong route params, won’t that lead to a lot of resource consumption because of mass api calls to the chosen error tracking systems?

Showing Posts 1 to 2

NobbZ

NobbZ

Assuming correct configuration, sentry or app signal wont see those errors, as they have been handled by other means.

Those error trackers/aggregators are to give you insight into errors that haven’t been handled, or that have been sent to the tracker explicitely.

bencoppock

bencoppock

Sentry (and I’m assuming most error tracking services) allow you to filter errors before they’re sent to the 3rd party service.

You can set up your own custom filter with Sentry, as documented here.

But even without any special configuration on your part, Sentry will by default use essentially the following filter (seen here). You can see that it ignores exceptions of type Phoenix.Router.NoRouteError as well as a few others.

defmodule Sentry.DefaultEventFilter do
  @behaviour Sentry.EventFilter

  @ignored_exceptions [Phoenix.Router.NoRouteError] # …others included here, too

  def exclude_exception?(%x{}, :plug) when x in @ignored_exceptions do
    true
  end

  # …etc.
end

This should all happen in memory and be quite efficient, so I don’t imagine it being a big concern from a DDoS standpoint.

— All posts loaded —

Where Next? Top

Trending in Questions Top

RSP87
I’m working on a project that simulates the bumbl example in the programming phoenix book. It acts almost like an email client. We have a...
New
nseaSeb
Hello, I know there is an approach for handling lists that allows for optimized traversal, but I can’t recall the specific method (somet...
New
RemyXRenard
I’m seeing that a list inside a Kino.DataTable will be interpreted as a charlist, even if the Kino.configure() is set to charlists: :as_l...
New
velrest
So my question is quite simple and i have found no conclusive answer on forum, google or AI. Should we use :erlang.float for Integer to ...
New
samoloth
Hi, I’ve just set up an application with ash_authentication. There is only magic link strategy for now, so there is no confirmation add o...
New
FlyingNoodle
If a change or preparation module uses Ash.Changeset.get_argument/2 or Ash.Query.get_argument/2 (or any of the other get_argument functio...
New
brecabral
Documentation While reading the Scoped Routes section, I noticed that the documentation currently refers to a problem without explainin...
New

Other Trending Topics Top

mudasobwa
I am happy to introduce the very α version of the new programming language compiled to BEAM. Welcome Cure. It has literally three kille...
New
marciok
Hi there! We created Gust: A task orchestrator inspired by Airflow. For those who have never heard about Aiflow, it’s a Python-based wor...
New
jimsynz
Beam Bots (or just BB for short) is a framework for building fault-tolerant robotics applications in Elixir using familiar OTP patterns. ...
New
Dmk
Xamal is a deployment tool for Elixir apps that deploys native releases to bare metal servers over SSH. It’s a port of GitHub - basecamp/...
New
netoum
Corex is an accessible, unstyled UI component library for Phoenix that integrates Zag.js state machines using Vanilla JavaScript and Live...
New
webofbits
Aludel - LLM Evaluation Workbench Aludel is an embeddable Phoenix LiveView dashboard for evaluating and comparing LLM prompts across mult...
New

We're in Beta

About us Mission Statement

Options

Thread Display Mode




Thread Preview

Skip Thread Previews