technote:security_linux
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
technote:security_linux [2025/10/03 02:37] – [Connection Handling Strategy] Scott Cunliffe | technote:security_linux [2025/10/03 03:00] (current) – [TapeTrack Server: Anti-Throttle and Anti-Hacking Measures] Scott Cunliffe | ||
---|---|---|---|
Line 1: | Line 1: | ||
- | ====== | + | ====== Server: Anti-Throttle and Anti-Hacking ====== |
===== Protocol Overview ===== | ===== Protocol Overview ===== | ||
Line 14: | Line 14: | ||
* **Connection Acceptance**: | * **Connection Acceptance**: | ||
- | * **Time-Out Table Check**: If the source IP is in the time-out table and the time-out period is still active, the connection is **immediately dropped**. | + | * **Time-Out Table Check**: If the source IP is in the time-out table and the time-out period is still active, the connection is immediately dropped. |
* **Protocol Validation**: | * **Protocol Validation**: | ||
- | **Summary**: | + | Once an IP address (or gateway) sends a non-TapeTrack packet, all future connections from that IP during the time-out period will be accepted but terminated immediately. |
===== Advanced Linux Integration: | ===== Advanced Linux Integration: | ||
- | On Linux systems, TapeTrack can integrate with **eBPF** for kernel-level IP blocking. | + | On Linux systems, TapeTrack can integrate with eBPF for kernel-level IP blocking. |
To enable this: | To enable this: | ||
* Start the server with the `-B` argument and a pointer to a preloaded eBPF table. | * Start the server with the `-B` argument and a pointer to a preloaded eBPF table. | ||
- | * TapeTrack will dynamically | + | * TapeTrack will dynamically add/remove IPs from the table during the time-out period. |
- | * If enabled, connections from banned IPs will be **blocked at the kernel level**, preventing any interaction with the TapeTrack Server. | + | * If enabled, connections from banned IPs will be blocked at the kernel level, preventing any interaction with the TapeTrack Server. |
===== Further Reading ===== | ===== Further Reading ===== | ||
- | For setup instructions and eBPF integration steps, refer to the [[technote: | + | For setup instructions and eBPF integration steps, refer to the [[technote: |
- | {{tag>tapetrack | + | {{tag> |
technote/security_linux.1759459046.txt.gz · Last modified: 2025/10/03 02:37 by Scott Cunliffe