Introduction
The Rhino VoLTE TAS XCAP server uses NGINX as revers proxy for handling XCAP requests. A Rate Limiter can be setup to provide DDoS protection on the XCAP interface. The configuration of this Rate Limiter is optional, and it can be enabled/disabled following the procedure described below.
For more details about how it is configured, visit Rhino VoLTE TAS Configuration and Management Guide: NGINX Rate Limiter.
Enabling NGINX Rate Limiter
To enable the NGINX Rate Limiter:
-
Add a
mag-nginx-config.yaml
file into the RVT YAML configuration directory. An example is available here: max-nginx-config.yaml. -
Upload configuration using
rvtconfig upload-config
for the mag node. For example:./rvtconfig upload-config -c <CDS address> -t mag -i <path-to-yaml-config-dir> --vm-version <vm-version>
-
Connect via ssh to a
mag
node and restart initconf (repeated on eachmag`node) `sudo systemctl restart initconf
Disabling NGINX Rate Limiter
To disable the NGINX Rate Limiter:
-
Remove the
mag-nginx-config.yaml
file from the RVT YAML configuration directory. -
Upload configuration using
rvtconfig upload-config
for the mag node. For example:./rvtconfig upload-config -c <CDS address> -t mag -i <path-to-yaml-config-dir> --vm-version <vm-version>
-
Connect via ssh to a
mag
node and restart initconf (repeated on eachmag`node) `sudo systemctl restart initconf