Protect against various forms of DDoS attacks in the Workspaces Drop-Off portal


THE INFORMATION IN THIS ARTICLE APPLIES TO:

  • EFT v7.4.x and earlier use the registry for advanced properties
  • EFT v8.x and later use the AdvancedProperties file

DISCUSSION

The following advanced properties are available for EFT to protect against various forms of DDoS attacks in the Workspaces Drop-Off portal.

For EFT v7.4.x and earlier, HKEY_LOCAL_MACHINE\SOFTWARE\ WOW6432Node \GlobalSCAPE Inc.\EFT Server 7.4\ add the DWORD values below. Create the EFT Server 7.4 key if it's not there.

For EFT v8.x and later, add the advanced properties (values names) below to the advancedproperties.json file. Refer https://kb.globalscape.com/Knowledgebase/11526/Advanced-Properties for details of adding properties to the AdvancedProperties.json file.

Advanced Property name Default More Information
MaxReCaptchaParallelRequests 30 Type: uint32_t
Default Value: 30
Minimum Value: 0
Maximum Value: 4294967295
Description: Max number of Limit number of concurrent ReCaptcha validations on a Site
MaxReCaptchaRequestTimeoutInSecs 30 Type: uint32_t
Default Value: 30
Minimum Value: 0
Maximum Value: 4294967295
Description: Limit time of ReCaptcha validation
MaxAnonymousAllUploadsSizeInGB 10; 0 = unlimited Type: uint32_t
Default Value: 10
Minimum Value: 0
Maximum Value: 4294967295
Description: Max allowed size for all anonymous (drop-off send and anon reply) in GB; zero means no limit.
MaxAnonymousRequests 50 Type: uint32_t
Default Value: 50
Minimum Value: 0
Maximum Value: 4294967295
Description: Max number of concurrent anonymous requests that can occur on a Site

If WTC/Workspaces tries to upload file(s) greater than MaxAnonymousAllUploadsSizeInGB, EFT doesn't allow the upload based on these settings and uploads fail.
The Maximum concurrent socket connections setting does not apply to anonymous connections.