Anonymous
2 years ago
implement a security system to protect against common owasp attacks against each of the servers that we have exposed on the network, where you can have a firewall with a set of rules, black and white lists, etc.
11 Replies
a year ago
☝️ Bump +1
Although, I think an easy win solution would be allowing us to lock to Cloudflare's IP addresses, which will allow us to proxy from Cloudflare, then use their WAF, DDoS, Rate Limiting, etc
Simple to implement from your guys end, no need to build out complex UIs, or networking infrastructure.
10 months ago
Bump!
I think Railway need to implement their own WAF & DDOS Protection, in my case, Cloudflare DDOS protection need some times to active, at that interval, the incoming attack will get through the origin server, and if Railway didn't have the internal protection to such attacks, the attacks then will be charged to our own account, and it seems not fair for the user to pay any amount for unexpected/unwanted request.
I agree with the Cloudflare IP lock solution for at least for now, but in the future I hope that Railway has it's own protection like Vercel/OVH did
4 months ago
Bump x2
We just got attacked and I would love a Railway Native WAF! In the meantime I will have to look at Cloudflare WAF, does that work with Railway or not
?
2 months ago
Same here. Railway should provide a standard WAF component. Cybercrime is all too common.
a month ago
Bump +1.
I just put service up and started getting flooding with spam requests
thethrivingvillage
Bump +1. I just put service up and started getting flooding with spam requests
a month ago
say wallah im not tryna pay money for ppl spamming requests ; - ;
a month ago
I think this is something we wanna keep our eye on. We tend to be pretty tight lipped about our ability to mitigate DDoS attacks, as it’s not a true WAF, but it’s something to be mindful of.
6 days ago
Bump +1 I think we need it that railway is secure by default and the options to handle in case of attack
pezzullig
Bump x2We just got attacked and I would love a Railway Native WAF! In the meantime I will have to look at Cloudflare WAF, does that work with Railway or not?
5 days ago
same question. we need security in the form of a firewall 100%, is cloudflare the only way?
akount
same question. we need security in the form of a firewall 100%, is cloudflare the only way?
5 days ago
does cloudflare work fully with railway?
4 days ago
The moment I assigned a custom domain to a service, I started seeing seeing HTTP requests like GET /.git/config in the HTTP Logs. Not excessive, but a few times per day. I would like to be able to block IP addresses that misbehave. I am not a fan of using Cloudflare WAF because I would like to use Railway to not have to use Big Tech.