[mod-security-users] User Tracking Options / Backends
Brought to you by:
victorhora,
zimmerletw
|
From: Osama E. <oel...@gm...> - 2017-03-22 22:38:33
|
Hi, I was wondering how people are implementing user tracking and how scalable it is? In my limited testing, I ran into an issue where for some strange reason the default persistence storage mechanism (ip.pag) would be hundreds of MB in size even after just a few requests. This was non-reproducible (on some machines this was an issue whereas on others, it wasn't). However, this is a known and reported bug https://github.com/SpiderLabs/ModSecurity/issues/574 and has been around for years (looks like they plan on fixing it in ModSecurity 3) so it makes me wary of using it. I'm not sure how badly this increased size would affect performance though (does it actually cache the entire ip.pag file as is or just the actual entries?). Does anyone use the default persistence storage mechanism or are you using something like memcached or redis via lua? What limits and problems have you run into? Thanks. -- Osama Elnaggar |