Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
Next revision Both sides next revision
litespeed_wiki:config:recaptcha [2019/06/14 20:22]
Lisa Clarke [Customize the reCAPTCHA Page]
litespeed_wiki:config:recaptcha [2019/07/08 19:34]
Lisa Clarke Copyediting
Line 21: Line 21:
  
  
-When a visitor accesses the website , they will need to go though reCAPTCHA validation ​to protect ​against ​a DDoS attack such as HTTP Flood.+When a visitor accesses the website, they will need to go though reCAPTCHA validation. This validation protects the server ​against HTTP Flood and other DDoS attacks. 
 + 
 +After passing the reCAPTCHA validation, the visitor is temporarily whitelisted as long as they continue to browse the site. This makes for a better user experience. Once the visitor has been inactive for more than 20 minutes, reCAPTCHA is once again enabled for that visitor'​s next request.
  
 {{:​litespeed_wiki:​config:​recaptcha3.jpg|}} {{:​litespeed_wiki:​config:​recaptcha3.jpg|}}
Line 67: Line 69:
  
 (''​SOME-CONDITIONAL-CHECK''​ would be a suspicious UA, IP address, etc.) (''​SOME-CONDITIONAL-CHECK''​ would be a suspicious UA, IP address, etc.)
 +
 +**NOTE**: In most cases, rewrite rules will override the default server behavior. However, in cases where trigger sensitivity is high, visitors may be sent directly to reCAPTCHA before the rewrite rules can even be processed.
  
 ===== Customize the Good Bots List ===== ===== Customize the Good Bots List =====
Line 107: Line 111:
  
 Active connections * 100 / **Max Connections** > (100 - **Trigger Sensitivity**) Active connections * 100 / **Max Connections** > (100 - **Trigger Sensitivity**)
 +
 +For example:
 +
 +If **Max Connections** = ''​1000'',​ **Trigger Sensitivity** = ''​20'',​ and you currently have 900 connections,​ the formula would be evaluated like so:
 +
 +900 * 100 / 1000 > 100 - 20
 +
 +90 > 80 
 +
 +The result is true, so the incoming connection //will// be given a reCAPTCHA test.
 +
 +Calculating backwards, you can see that when the number of connections drops to less than 800, reCAPTCHA will not be invoked.
 +
  
 ===== reCAPTCHA Returning 403 and Dropping Connection ===== ===== reCAPTCHA Returning 403 and Dropping Connection =====
  • Admin
  • Last modified: 2019/09/23 14:25
  • by Jackson Zhang