realcorvus

realcorvus

Throttling and Blocking Bad Requests in Phoenix Web Applications with PlugAttack

Hi Elixir forum, I just published a tutorial on how credential stuffing attacks can occur against a Phoenix application, and some strategies to mitigate them using PlugAttack. The post walks through:

  • Setting up a victim application, named orru
  • Using a basic script to perform automated logins, envy
  • The throttle and fail2ban rules in PlugAttack, and some potential pitfalls you may run into when setting them up, and how to avoid them

Thank you for reading!

2
Post #804
ostap

ostap

“Uptime monitor in Elixir & Phoenix”

1
Post #805
soyjeansoy

soyjeansoy

Anybody here knows an article or any on search engine in Phoenix app? something like this.

1
Post #806
derek-zhou

derek-zhou

There are ways to connect to anything for an external search engine. If your don’t need multi-node scalability, there are 2 low effort ways:

  • use the built-in full text search of postgres
  • use tantivy, a very thin wrapper of the the excellent rust library of the same name. Shameless plug: The wrapper is written by me.
5
Post #807
soyjeansoy

soyjeansoy

Ah that helps alot :pray:. Will try those, thank you.

0
Post #808
qhwa

qhwa

Recently we fixed a memory consumption issue. I hope this can be helpful to someone other too!

4
Post #809
03juan

03juan

Thanks for the article. I’m going to need some event sourcing in an upcoming project and it helps knowing these things up front.

0
Post #810
brewinstallbuzzwords

brewinstallbuzzwords

I recently took a look into the macros for Phoenix controllers to see how they work, and wrote some simple examples of how you might go about changing those macros for different use cases.

0
Post #811
civilframe

civilframe

Hey Elixir fans!

I recently worked with Elixir for parsing UDP. Binary pattern matching to the rescue! I wrote a blog article about my learnings:

http://blog.rokkincat.com/parsing-udp-in-elixir-with-binary-pattern-matching/

Moved to: https://rokkincat.com/blog/2016-05-09-parsing-udp-in-elixir-with-binary-pattern-matching/

9
Post #812
sashaafm

sashaafm

Very nice Alex :slight_smile: I love reading and seeing how pattern matching allows for
expressiveness and smarter development.

1
Post #813