conf/security
The conf/security file contains the security configuration of the software. Settings in this classes can be configured under the System > Security section of the Admin Server UI.
Key | Description |
|---|---|
access | Access to the admin server and REST API is restricted by usernames and passwords. You can further restrict access to just trusted IP addresses, CIDR IP subnets or DNS wildcards. These access restrictions are also used when another traffic manager initially joins the cluster, after joining the cluster these restrictions are no longer used. Care must be taken when changing this setting, as it can cause the administration server to become inaccessible. Access to the admin UI will not be affected until it is restarted. Value type: list Default value: <none> |
ssh_intrusion!bantime | The amount of time in seconds to ban an offending host for. Value type: unsigned integer Default value: "600" |
ssh_intrusion!blacklist | The list of hosts to permanently ban, identified by IP address or DNS hostname in a space-separated list. Value type: list Default value: <none> |
ssh_intrusion!enabled | Whether or not the SSH Intrusion Prevention tool is enabled. Value type: Yes / No Default value: "Yes" |
ssh_intrusion!findtime | The window of time in seconds the maximum number of connection attempts applies to. More than (maxretry) failed attempts in this time span will trigger a ban. Value type: unsigned integer Default value: "600" |
ssh_intrusion!maxretry | The number of failed connection attempts a host can make before being banned. Value type: unsigned integer Default value: "6" |
ssh_intrusion!whitelist | The list of hosts to never ban, identified by IP address, DNS hostname or subnet mask, in a space-separated list. Value type: list Default value: <none> |