Automate blocking of users that go over the network limit

[Furisto]

Is your feature request related to a problem? Please describe

Users that abuse Gitpod by running DDoS attacks or scanners should be banned automatically.

Describe the behaviour you'd like

We already drop traffic if too many connections are openend. Agent-smith should check the number of dropped connection attempts and block the user if the number goes over a certain threshold.

Describe alternatives you've considered

Continue doing it manually

[kylos101]

@Furisto I'm unsure about this, because, we could block a legit free user, too (who is not running DDOS attacks or scanners, but is running something else that is hungry for connections).

Are there any other potential solutions you can you think of? 🤔

[Furisto]

@kylos101 We would not block all users that get throttled. I am talking about users that exceed the connection limit by such a large margin that it could not be anything else than abuse.

[kylos101]

I missed this key part if the number goes over a certain threshold.. Thank you @Furisto !

[kylos101]

One last question, what would the effort look like for this? I assume it's just on the agent-smith side, and there's nothing new needed in WebApp?

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.