RequestDropper

A request-dropping extension for ASP.NET Core

RequestDropper for ASP.NET Core

This repository contains the C# source code for RequestDropper. You should get it on NuGet:

PM> Install-Package RequestDropper

Overview

Requestdropper tries to bring some peace of mind to the developer who wants to get rid of requests after a certain amount of configured rules have been voilated by returning a 429 or a 302 status code.

Some of the major features include:

High performance
Tiny footprint
Easy to configure
Extensive customization
Flexible extensibility

Basic usage

publicclassStartup{publicvoidConfigureServices(IServiceCollectionservices){//...// Add the request dropper logic and chain a store.// Default configuration section.services.AddRequestDropper(hostBuilder.Configuration).AddMemoryCacheStore();//...}publicvoidConfigure(IApplicationBuilderapp,IWebHostEnvironmentenv){//...// Add the requestdropper middleware app.UseRequestDropperMiddleware();//...}}

Configuration

Where your appsettings.json (or other configuration source) contains a configuration like this:

{
"DropperSettings": {
"Limit": 60, // The amount of points required before a request is dropped."Period": "00:01:30", // How long a client will be blocked."ExcludedPaths": [ "/excluded-global" ], // Paths you wish to exclude from being handled by the request dropper middleware."Rules": {
"404": { // How to handle requests that resulted in a 404 status code."Weight": 20, // Give them a 20 point penalty."ExcludedPaths": [ // Except on the following paths."/excluded-404" ]
},
"500": {
"Weight": 5,
"ExcludedPaths": [
"/excluded-error"
]
},
"401": {
"Weight": 15,
"ExcludedPaths": [
"/useless-login"
]
} }
}
}

Stores

RequestDropper comes with 2 default stores for keeping track of the requests. MemoryCacheStore and the DistributedCacheStore

See RequestDropper.Mongo for creating a custom store and logic or if something more presistant is required and you don't (for whatver reason) want to use Redis.

Specifications

Overwriting default behaviour.

By default requests are tried together using the IP Address This can be changed by overriding the Key method on the RequestHandle

publicclassCustomHandler:NativeRequestHandler{publicCustomHandler(IStore<DropCounter?>store,IOptions<DropperSettings>dropperSettings):base(store,dropperSettings){}
#region Overrides of RequestHandler<DropCounter?>
publicoverridestringKey(HttpContextcontext){returnCustomRequestIdentity;// e.g. UserId...}
#endregion
}

TODO

TODO: Whitelist IP Addresses as a setting.
TODO: Separate Key logic into it's own class.
TODO: Hash default keys.
TODO: Some sort of Mediatr logic so block events can be listened to.
TODO: Improved docs.
TODO: Redis based store.
TODO: Clean the code.

Licensing

RequestDropper is licensed under the MIT license. It is free to use in personal and commercial projects.

RequestDropper

A request-dropping extension for ASP.NET Core

RequestDropper for ASP.NET Core

This repository contains the C# source code for RequestDropper. You should get it on NuGet:

PM> Install-Package RequestDropper

Overview

Requestdropper tries to bring some peace of mind to the developer who wants to get rid of requests after a certain amount of configured rules have been voilated by returning a 429 or a 302 status code.

Some of the major features include:

High performance
Tiny footprint
Easy to configure
Extensive customization
Flexible extensibility

Basic usage

publicclassStartup{publicvoidConfigureServices(IServiceCollectionservices){//...// Add the request dropper logic and chain a store.// Default configuration section.services.AddRequestDropper(hostBuilder.Configuration).AddMemoryCacheStore();//...}publicvoidConfigure(IApplicationBuilderapp,IWebHostEnvironmentenv){//...// Add the requestdropper middleware app.UseRequestDropperMiddleware();//...}}

Configuration

Where your appsettings.json (or other configuration source) contains a configuration like this:

{
"DropperSettings": {
"Limit": 60, // The amount of points required before a request is dropped."Period": "00:01:30", // How long a client will be blocked."ExcludedPaths": [ "/excluded-global" ], // Paths you wish to exclude from being handled by the request dropper middleware."Rules": {
"404": { // How to handle requests that resulted in a 404 status code."Weight": 20, // Give them a 20 point penalty."ExcludedPaths": [ // Except on the following paths."/excluded-404" ]
},
"500": {
"Weight": 5,
"ExcludedPaths": [
"/excluded-error"
]
},
"401": {
"Weight": 15,
"ExcludedPaths": [
"/useless-login"
]
} }
}
}

Stores

RequestDropper comes with 2 default stores for keeping track of the requests. MemoryCacheStore and the DistributedCacheStore

See RequestDropper.Mongo for creating a custom store and logic or if something more presistant is required and you don't (for whatver reason) want to use Redis.

Specifications

Overwriting default behaviour.

By default requests are tried together using the IP Address This can be changed by overriding the Key method on the RequestHandle

publicclassCustomHandler:NativeRequestHandler{publicCustomHandler(IStore<DropCounter?>store,IOptions<DropperSettings>dropperSettings):base(store,dropperSettings){}
#region Overrides of RequestHandler<DropCounter?>
publicoverridestringKey(HttpContextcontext){returnCustomRequestIdentity;// e.g. UserId...}
#endregion
}

TODO

TODO: Whitelist IP Addresses as a setting.
TODO: Separate Key logic into it's own class.
TODO: Hash default keys.
TODO: Some sort of Mediatr logic so block events can be listened to.
TODO: Improved docs.
TODO: Redis based store.
TODO: Clean the code.

Licensing

RequestDropper is licensed under the MIT license. It is free to use in personal and commercial projects.

RequestDropper

A request-dropping extension for ASP.NET Core

RequestDropper for ASP.NET Core

This repository contains the C# source code for RequestDropper. You should get it on NuGet:

PM> Install-Package RequestDropper

Overview

Requestdropper tries to bring some peace of mind to the developer who wants to get rid of requests after a certain amount of configured rules have been voilated by returning a 429 or a 302 status code.

Some of the major features include:

High performance
Tiny footprint
Easy to configure
Extensive customization
Flexible extensibility

Basic usage

publicclassStartup{publicvoidConfigureServices(IServiceCollectionservices){//...// Add the request dropper logic and chain a store.// Default configuration section.services.AddRequestDropper(hostBuilder.Configuration).AddMemoryCacheStore();//...}publicvoidConfigure(IApplicationBuilderapp,IWebHostEnvironmentenv){//...// Add the requestdropper middleware app.UseRequestDropperMiddleware();//...}}

Configuration

Where your appsettings.json (or other configuration source) contains a configuration like this:

{
"DropperSettings": {
"Limit": 60, // The amount of points required before a request is dropped."Period": "00:01:30", // How long a client will be blocked."ExcludedPaths": [ "/excluded-global" ], // Paths you wish to exclude from being handled by the request dropper middleware."Rules": {
"404": { // How to handle requests that resulted in a 404 status code."Weight": 20, // Give them a 20 point penalty."ExcludedPaths": [ // Except on the following paths."/excluded-404" ]
},
"500": {
"Weight": 5,
"ExcludedPaths": [
"/excluded-error"
]
},
"401": {
"Weight": 15,
"ExcludedPaths": [
"/useless-login"
]
} }
}
}

Stores

RequestDropper comes with 2 default stores for keeping track of the requests. MemoryCacheStore and the DistributedCacheStore

See RequestDropper.Mongo for creating a custom store and logic or if something more presistant is required and you don't (for whatver reason) want to use Redis.

Specifications

Overwriting default behaviour.

By default requests are tried together using the IP Address This can be changed by overriding the Key method on the RequestHandle

publicclassCustomHandler:NativeRequestHandler{publicCustomHandler(IStore<DropCounter?>store,IOptions<DropperSettings>dropperSettings):base(store,dropperSettings){}
#region Overrides of RequestHandler<DropCounter?>
publicoverridestringKey(HttpContextcontext){returnCustomRequestIdentity;// e.g. UserId...}
#endregion
}

TODO

TODO: Whitelist IP Addresses as a setting.
TODO: Separate Key logic into it's own class.
TODO: Hash default keys.
TODO: Some sort of Mediatr logic so block events can be listened to.
TODO: Improved docs.
TODO: Redis based store.
TODO: Clean the code.

Licensing

RequestDropper is licensed under the MIT license. It is free to use in personal and commercial projects.

RequestDropper

A request-dropping extension for ASP.NET Core

RequestDropper for ASP.NET Core

This repository contains the C# source code for RequestDropper. You should get it on NuGet:

PM> Install-Package RequestDropper

Overview

Requestdropper tries to bring some peace of mind to the developer who wants to get rid of requests after a certain amount of configured rules have been voilated by returning a 429 or a 302 status code.

Some of the major features include:

High performance
Tiny footprint
Easy to configure
Extensive customization
Flexible extensibility

Basic usage

publicclassStartup{publicvoidConfigureServices(IServiceCollectionservices){//...// Add the request dropper logic and chain a store.// Default configuration section.services.AddRequestDropper(hostBuilder.Configuration).AddMemoryCacheStore();//...}publicvoidConfigure(IApplicationBuilderapp,IWebHostEnvironmentenv){//...// Add the requestdropper middleware app.UseRequestDropperMiddleware();//...}}

Configuration

Where your appsettings.json (or other configuration source) contains a configuration like this:

{
"DropperSettings": {
"Limit": 60, // The amount of points required before a request is dropped."Period": "00:01:30", // How long a client will be blocked."ExcludedPaths": [ "/excluded-global" ], // Paths you wish to exclude from being handled by the request dropper middleware."Rules": {
"404": { // How to handle requests that resulted in a 404 status code."Weight": 20, // Give them a 20 point penalty."ExcludedPaths": [ // Except on the following paths."/excluded-404" ]
},
"500": {
"Weight": 5,
"ExcludedPaths": [
"/excluded-error"
]
},
"401": {
"Weight": 15,
"ExcludedPaths": [
"/useless-login"
]
} }
}
}

Stores

RequestDropper comes with 2 default stores for keeping track of the requests. MemoryCacheStore and the DistributedCacheStore

See RequestDropper.Mongo for creating a custom store and logic or if something more presistant is required and you don't (for whatver reason) want to use Redis.

Specifications

Overwriting default behaviour.

By default requests are tried together using the IP Address This can be changed by overriding the Key method on the RequestHandle

publicclassCustomHandler:NativeRequestHandler{publicCustomHandler(IStore<DropCounter?>store,IOptions<DropperSettings>dropperSettings):base(store,dropperSettings){}
#region Overrides of RequestHandler<DropCounter?>
publicoverridestringKey(HttpContextcontext){returnCustomRequestIdentity;// e.g. UserId...}
#endregion
}

TODO

TODO: Whitelist IP Addresses as a setting.
TODO: Separate Key logic into it's own class.
TODO: Hash default keys.
TODO: Some sort of Mediatr logic so block events can be listened to.
TODO: Improved docs.
TODO: Redis based store.
TODO: Clean the code.

Licensing

RequestDropper is licensed under the MIT license. It is free to use in personal and commercial projects.

RequestDropper

A request-dropping extension for ASP.NET Core

RequestDropper for ASP.NET Core

This repository contains the C# source code for RequestDropper. You should get it on NuGet:

PM> Install-Package RequestDropper

Overview

Requestdropper tries to bring some peace of mind to the developer who wants to get rid of requests after a certain amount of configured rules have been voilated by returning a 429 or a 302 status code.

Some of the major features include:

High performance
Tiny footprint
Easy to configure
Extensive customization
Flexible extensibility

Basic usage

publicclassStartup{publicvoidConfigureServices(IServiceCollectionservices){//...// Add the request dropper logic and chain a store.// Default configuration section.services.AddRequestDropper(hostBuilder.Configuration).AddMemoryCacheStore();//...}publicvoidConfigure(IApplicationBuilderapp,IWebHostEnvironmentenv){//...// Add the requestdropper middleware app.UseRequestDropperMiddleware();//...}}

Configuration

Where your appsettings.json (or other configuration source) contains a configuration like this:

{
"DropperSettings": {
"Limit": 60, // The amount of points required before a request is dropped."Period": "00:01:30", // How long a client will be blocked."ExcludedPaths": [ "/excluded-global" ], // Paths you wish to exclude from being handled by the request dropper middleware."Rules": {
"404": { // How to handle requests that resulted in a 404 status code."Weight": 20, // Give them a 20 point penalty."ExcludedPaths": [ // Except on the following paths."/excluded-404" ]
},
"500": {
"Weight": 5,
"ExcludedPaths": [
"/excluded-error"
]
},
"401": {
"Weight": 15,
"ExcludedPaths": [
"/useless-login"
]
} }
}
}

Stores

RequestDropper comes with 2 default stores for keeping track of the requests. MemoryCacheStore and the DistributedCacheStore

See RequestDropper.Mongo for creating a custom store and logic or if something more presistant is required and you don't (for whatver reason) want to use Redis.

Specifications

Overwriting default behaviour.

By default requests are tried together using the IP Address This can be changed by overriding the Key method on the RequestHandle

publicclassCustomHandler:NativeRequestHandler{publicCustomHandler(IStore<DropCounter?>store,IOptions<DropperSettings>dropperSettings):base(store,dropperSettings){}
#region Overrides of RequestHandler<DropCounter?>
publicoverridestringKey(HttpContextcontext){returnCustomRequestIdentity;// e.g. UserId...}
#endregion
}

TODO

TODO: Whitelist IP Addresses as a setting.
TODO: Separate Key logic into it's own class.
TODO: Hash default keys.
TODO: Some sort of Mediatr logic so block events can be listened to.
TODO: Improved docs.
TODO: Redis based store.
TODO: Clean the code.

Licensing

RequestDropper is licensed under the MIT license. It is free to use in personal and commercial projects.

RequestDropper

A request-dropping extension for ASP.NET Core

RequestDropper for ASP.NET Core

This repository contains the C# source code for RequestDropper. You should get it on NuGet:

PM> Install-Package RequestDropper

Overview

Requestdropper tries to bring some peace of mind to the developer who wants to get rid of requests after a certain amount of configured rules have been voilated by returning a 429 or a 302 status code.

Some of the major features include:

High performance
Tiny footprint
Easy to configure
Extensive customization
Flexible extensibility

Basic usage

publicclassStartup{publicvoidConfigureServices(IServiceCollectionservices){//...// Add the request dropper logic and chain a store.// Default configuration section.services.AddRequestDropper(hostBuilder.Configuration).AddMemoryCacheStore();//...}publicvoidConfigure(IApplicationBuilderapp,IWebHostEnvironmentenv){//...// Add the requestdropper middleware app.UseRequestDropperMiddleware();//...}}

Configuration

Where your appsettings.json (or other configuration source) contains a configuration like this:

{
"DropperSettings": {
"Limit": 60, // The amount of points required before a request is dropped."Period": "00:01:30", // How long a client will be blocked."ExcludedPaths": [ "/excluded-global" ], // Paths you wish to exclude from being handled by the request dropper middleware."Rules": {
"404": { // How to handle requests that resulted in a 404 status code."Weight": 20, // Give them a 20 point penalty."ExcludedPaths": [ // Except on the following paths."/excluded-404" ]
},
"500": {
"Weight": 5,
"ExcludedPaths": [
"/excluded-error"
]
},
"401": {
"Weight": 15,
"ExcludedPaths": [
"/useless-login"
]
} }
}
}

Stores

RequestDropper comes with 2 default stores for keeping track of the requests. MemoryCacheStore and the DistributedCacheStore

See RequestDropper.Mongo for creating a custom store and logic or if something more presistant is required and you don't (for whatver reason) want to use Redis.

Specifications

Overwriting default behaviour.

By default requests are tried together using the IP Address This can be changed by overriding the Key method on the RequestHandle

publicclassCustomHandler:NativeRequestHandler{publicCustomHandler(IStore<DropCounter?>store,IOptions<DropperSettings>dropperSettings):base(store,dropperSettings){}
#region Overrides of RequestHandler<DropCounter?>
publicoverridestringKey(HttpContextcontext){returnCustomRequestIdentity;// e.g. UserId...}
#endregion
}

TODO

TODO: Whitelist IP Addresses as a setting.
TODO: Separate Key logic into it's own class.
TODO: Hash default keys.
TODO: Some sort of Mediatr logic so block events can be listened to.
TODO: Improved docs.
TODO: Redis based store.
TODO: Clean the code.

Licensing

RequestDropper is licensed under the MIT license. It is free to use in personal and commercial projects.

RequestDropper

A request-dropping extension for ASP.NET Core

RequestDropper for ASP.NET Core

This repository contains the C# source code for RequestDropper. You should get it on NuGet:

PM> Install-Package RequestDropper

Overview

Requestdropper tries to bring some peace of mind to the developer who wants to get rid of requests after a certain amount of configured rules have been voilated by returning a 429 or a 302 status code.

Some of the major features include:

High performance
Tiny footprint
Easy to configure
Extensive customization
Flexible extensibility

Basic usage

publicclassStartup{publicvoidConfigureServices(IServiceCollectionservices){//...// Add the request dropper logic and chain a store.// Default configuration section.services.AddRequestDropper(hostBuilder.Configuration).AddMemoryCacheStore();//...}publicvoidConfigure(IApplicationBuilderapp,IWebHostEnvironmentenv){//...// Add the requestdropper middleware app.UseRequestDropperMiddleware();//...}}

Configuration

Where your appsettings.json (or other configuration source) contains a configuration like this:

{
"DropperSettings": {
"Limit": 60, // The amount of points required before a request is dropped."Period": "00:01:30", // How long a client will be blocked."ExcludedPaths": [ "/excluded-global" ], // Paths you wish to exclude from being handled by the request dropper middleware."Rules": {
"404": { // How to handle requests that resulted in a 404 status code."Weight": 20, // Give them a 20 point penalty."ExcludedPaths": [ // Except on the following paths."/excluded-404" ]
},
"500": {
"Weight": 5,
"ExcludedPaths": [
"/excluded-error"
]
},
"401": {
"Weight": 15,
"ExcludedPaths": [
"/useless-login"
]
} }
}
}

Stores

RequestDropper comes with 2 default stores for keeping track of the requests. MemoryCacheStore and the DistributedCacheStore

See RequestDropper.Mongo for creating a custom store and logic or if something more presistant is required and you don't (for whatver reason) want to use Redis.

Specifications

Overwriting default behaviour.

By default requests are tried together using the IP Address This can be changed by overriding the Key method on the RequestHandle

publicclassCustomHandler:NativeRequestHandler{publicCustomHandler(IStore<DropCounter?>store,IOptions<DropperSettings>dropperSettings):base(store,dropperSettings){}
#region Overrides of RequestHandler<DropCounter?>
publicoverridestringKey(HttpContextcontext){returnCustomRequestIdentity;// e.g. UserId...}
#endregion
}

TODO

TODO: Whitelist IP Addresses as a setting.
TODO: Separate Key logic into it's own class.
TODO: Hash default keys.
TODO: Some sort of Mediatr logic so block events can be listened to.
TODO: Improved docs.
TODO: Redis based store.
TODO: Clean the code.

Licensing

RequestDropper is licensed under the MIT license. It is free to use in personal and commercial projects.

RequestDropper

A request-dropping extension for ASP.NET Core

RequestDropper for ASP.NET Core

This repository contains the C# source code for RequestDropper. You should get it on NuGet:

PM> Install-Package RequestDropper

Overview

Requestdropper tries to bring some peace of mind to the developer who wants to get rid of requests after a certain amount of configured rules have been voilated by returning a 429 or a 302 status code.

Some of the major features include:

High performance
Tiny footprint
Easy to configure
Extensive customization
Flexible extensibility

Basic usage

publicclassStartup{publicvoidConfigureServices(IServiceCollectionservices){//...// Add the request dropper logic and chain a store.// Default configuration section.services.AddRequestDropper(hostBuilder.Configuration).AddMemoryCacheStore();//...}publicvoidConfigure(IApplicationBuilderapp,IWebHostEnvironmentenv){//...// Add the requestdropper middleware app.UseRequestDropperMiddleware();//...}}

Configuration

Where your appsettings.json (or other configuration source) contains a configuration like this:

{
"DropperSettings": {
"Limit": 60, // The amount of points required before a request is dropped."Period": "00:01:30", // How long a client will be blocked."ExcludedPaths": [ "/excluded-global" ], // Paths you wish to exclude from being handled by the request dropper middleware."Rules": {
"404": { // How to handle requests that resulted in a 404 status code."Weight": 20, // Give them a 20 point penalty."ExcludedPaths": [ // Except on the following paths."/excluded-404" ]
},
"500": {
"Weight": 5,
"ExcludedPaths": [
"/excluded-error"
]
},
"401": {
"Weight": 15,
"ExcludedPaths": [
"/useless-login"
]
} }
}
}

Stores

RequestDropper comes with 2 default stores for keeping track of the requests. MemoryCacheStore and the DistributedCacheStore

See RequestDropper.Mongo for creating a custom store and logic or if something more presistant is required and you don't (for whatver reason) want to use Redis.

Specifications

Overwriting default behaviour.

By default requests are tried together using the IP Address This can be changed by overriding the Key method on the RequestHandle

publicclassCustomHandler:NativeRequestHandler{publicCustomHandler(IStore<DropCounter?>store,IOptions<DropperSettings>dropperSettings):base(store,dropperSettings){}
#region Overrides of RequestHandler<DropCounter?>
publicoverridestringKey(HttpContextcontext){returnCustomRequestIdentity;// e.g. UserId...}
#endregion
}

TODO

TODO: Whitelist IP Addresses as a setting.
TODO: Separate Key logic into it's own class.
TODO: Hash default keys.
TODO: Some sort of Mediatr logic so block events can be listened to.
TODO: Improved docs.
TODO: Redis based store.
TODO: Clean the code.

Licensing

RequestDropper is licensed under the MIT license. It is free to use in personal and commercial projects.

Name		Name	Last commit message	Last commit date
.github/workflows		.github/workflows
example/Web		example/Web
images		images
src		src
tests/RequestDropper.Middleware.Tests		tests/RequestDropper.Middleware.Tests
.gitignore		.gitignore
CodeCoverage.runsettings		CodeCoverage.runsettings
README.md		README.md
RequestDropper.sln		RequestDropper.sln

Name		Name	Last commit message	Last commit date
.github/workflows		.github/workflows
example/Web		example/Web
images		images
src		src
tests/RequestDropper.Middleware.Tests		tests/RequestDropper.Middleware.Tests
.gitignore		.gitignore
CodeCoverage.runsettings		CodeCoverage.runsettings
README.md		README.md
RequestDropper.sln		RequestDropper.sln

Name		Name	Last commit message	Last commit date
.github/workflows		.github/workflows
example/Web		example/Web
images		images
src		src
tests/RequestDropper.Middleware.Tests		tests/RequestDropper.Middleware.Tests
.gitignore		.gitignore
CodeCoverage.runsettings		CodeCoverage.runsettings
README.md		README.md
RequestDropper.sln		RequestDropper.sln

Name		Name	Last commit message	Last commit date
.github/workflows		.github/workflows
example/Web		example/Web
images		images
src		src
tests/RequestDropper.Middleware.Tests		tests/RequestDropper.Middleware.Tests
.gitignore		.gitignore
CodeCoverage.runsettings		CodeCoverage.runsettings
README.md		README.md
RequestDropper.sln		RequestDropper.sln

Name		Name	Last commit message	Last commit date
.github/workflows		.github/workflows
example/Web		example/Web
images		images
src		src
tests/RequestDropper.Middleware.Tests		tests/RequestDropper.Middleware.Tests
.gitignore		.gitignore
CodeCoverage.runsettings		CodeCoverage.runsettings
README.md		README.md
RequestDropper.sln		RequestDropper.sln

Latest commit

History

Folders and files

Repository files navigation

RequestDropper

RequestDropper for ASP.NET Core

Overview

Basic usage

Configuration

Stores

Specifications

Overwriting default behaviour.

TODO

Licensing

About

Topics

Resources

Stars

Watchers

Forks

Releases

Packages

Used by

Contributors

Languages

Latest commit

History

Folders and files

Repository files navigation

RequestDropper

RequestDropper for ASP.NET Core

Overview

Basic usage

Configuration

Stores

Specifications

Overwriting default behaviour.

TODO

Licensing

About

Topics

Resources

Stars

Watchers

Forks

Releases

Packages

Used by

Contributors

Languages

Latest commit

History

Folders and files

Repository files navigation

RequestDropper

RequestDropper for ASP.NET Core

Overview

Basic usage

Configuration

Stores

Specifications

Overwriting default behaviour.

TODO

Licensing

About

Topics

Resources

Stars

Watchers

Forks

Releases

Packages

Used by

Contributors

Languages

Latest commit

History

Folders and files

Repository files navigation

RequestDropper