Skip to main content

Protection against Denial-of-Service attacks

This feature is introduced with Snow Inventory Server 6.2.1.

To protect against Denial-of-Service attacks, Snow Inventory Server can be configured to limit the accepted size and rate of incoming data to the Snow Inventory Server web APIs.

The settings are made in the <Server> section of the Snow Inventory Server configuration file. The following options are available:

  • MaxConcurrentRequestCount: Sets a limit for the number of concurrent requests handled by the Snow Inventory Server web APIs. The default value is Unlimited.

  • MaxRequestMessageSize: Sets a limit, in MB, for the data payload size accepted by the Snow Inventory Server web APIs. The default value is 64 MB.

Example 25. 
<Configuration>
    <Master>
        ...  
        <Server>
            ...
            <SiteName>SnowInventory</SiteName>   
            <IncomingFolder>C:\Program Files\Snow Software\Snow
            Inventory\Server\Incoming</IncomingFolder>    
            <BaseAddress>https://*:8085</BaseAddress>      
            <MaxConcurrentRequestCount>200</MaxConcurrentRequestCount>  
            ... 
        </Server>
        ...
   </Master>
</Configuration>


In this section: