4 Commits

Include renames

Author	SHA1	Message	Date
openhands	4479753160	feat(security): mirror anti-DDoS blocks to Cloudflare edge via API ... - gate creates a zone IP Access Rule (block) for proxied offenders that hit the block threshold, deduped until the tiered block expires - cloudflare-api lib: verified endpoints, create/delete/verify/list helpers, Redis-backed tracking + 30s TTL sweep (instrumentation worker + admin render) - runtime toggle cloudflareAutoBlock in antiddos config; boot default CLOUDFLARE_AUTO_BLOCK_ENABLED - admin panel: Cloudflare edge-blocks card with verify + remove-rule actions; unban also lifts the edge block - credentials live in env only (CLOUDFLARE_API_TOKEN / CLOUDFLARE_ZONE_ID)	2026-09-22 23:27:15 +02:00
openhands	f0c27eb815	feat(security): Cloudflare-aware IP trust and admin-tunable anti-DDoS ... - resolveClientIp: trust cf-connecting-ip only behind cf-ray/cdn-loop, use nginx x-real-ip otherwise (anti-spoof) - antiddos-config: Redis-backed live config (antiddos:config) with 30s cache, 13 ANTI_DDOS_* env vars - ddos-guard: consume tunable rates/tiers via getAntiddosConfig - admin panel at /admin/devops/antiddos (save/reset/unban actions, PERMS.SETTINGS_VIEW) - register new admin page in housekeeping migration matrix (146 -> 147)	2026-09-22 22:22:51 +02:00
openhands	fd4d0fa1cb	feat(security): harden anti-DDoS gate with scanner triage, tiered blocks and in-process global halt	2026-09-22 21:57:09 +02:00
openhands	98a184953a	feat(security): add Redis-backed app-layer anti-DDoS rate limiting to proxy	2026-09-22 21:48:40 +02:00