loki5512344
269daa071f
Layers: Layer 1: XDP/eBPF — TCP state machine, SYN throttle, blacklist, ringbuf Layer 2: PoW Challenge — SHA-256 hashcash, dynamic difficulty, constant-time verify Layer 3: Rust Core — HMAC handshake, rate limit, death code (existing) Layer 4: Velocity — Physics check, CAPTCHA, protocol verification Layer 5: Paper — Heartbeat, auto-registration (existing) Layer 6: Traffic Intel — EWMA, 168h profiling, reputation, alerts Infra: XDP→Prometheus metrics, ClickHouse + Grafana dashboard, Docker Compose Testing: 100-IP DDoS simulation, MHDDoS ref analysis, load test report Fixes: VarInt sign extension UB, pure ACK deadlock, RST/FIN cleanup Ref: MHDDoS, Sonar, LimboFilter, AtomGuard, Infrarust, MC-XDP-eBPF, PowGo
45 lines
557 B
TOML
45 lines
557 B
TOML
[bind]
|
|
address = "0.0.0.0"
|
|
port = 25565
|
|
|
|
[backend]
|
|
address = "backend"
|
|
port = 25565
|
|
|
|
[hmac]
|
|
secret = "test-secret-for-local-dev-only"
|
|
|
|
[worker]
|
|
count = 4
|
|
|
|
[limits]
|
|
rate_limit_login_pps = 50
|
|
rate_limit_burst = 100
|
|
|
|
[store]
|
|
redis_url = ""
|
|
clickhouse_url = "http://clickhouse:8123"
|
|
|
|
[xdp]
|
|
enabled = false
|
|
interface = "eth0"
|
|
|
|
[death_code]
|
|
enabled = true
|
|
|
|
[minecraft]
|
|
ping_timeout_ms = 5000
|
|
handshake_timeout_ms = 10000
|
|
|
|
[metrics]
|
|
enabled = true
|
|
port = 9090
|
|
|
|
[logging]
|
|
level = "debug"
|
|
|
|
[pow]
|
|
enabled = true
|
|
difficulty = 4
|
|
|
|
whitelist = ["localhost", "127.0.0.1"]
|