4 ms·
Is there some pattern or rule you can put into Varnish/CDN/nginx to prevent this??
by reza_n 8y ago
Is there some pattern or rule you can put into Varnish/CDN/nginx to prevent this??
- Jgrubb 8y agoYou really need a Layer 7 kind of thing to be able to inspect the actual payload of the request. I don't think any of those can do that. You'd need an actual WAF.
- krehl 8y agoCloudflare was able to protect against Drupalgeddon 2 https://blog.cloudflare.com/keeping-drupal-sites-safe-with-cloudflares-waf/ https://blog.cloudflare.com/keeping-drupal-sites-safe-with-c...
- Jgrubb 8y agoThat's a WAF layer though. I don't know of a way to do this with Varnish or a straight CDN.
- mgbmtl 8y agoHere is what Aegir/BOA uses: https://www.drupal.org/project/provision/issues/2960825 https://www.drupal.org/project/provision/issues/2960825 https://cgit.drupalcode.org/provision/commit/?id=638b03d https://cgit.drupalcode.org/provision/commit/?id=638b03d