[mod-security-users] User Tracking Options / Backends

[Osama E. <oel...@gm...>]

Hi,

I was wondering how people are implementing user tracking and how scalable
it is?  In my limited testing, I ran into an issue where for some strange
reason the default persistence storage mechanism (ip.pag) would be hundreds
of MB in size even after just a few requests.  This was non-reproducible
(on some machines this was an issue whereas on others, it wasn't).
However, this is a known and reported bug
https://github.com/SpiderLabs/ModSecurity/issues/574 and has been around
for years (looks like they plan on fixing it in ModSecurity 3) so it makes
me wary of using it.

I'm not sure how badly this increased size would affect performance though
(does it actually cache the entire ip.pag file as is or just the actual
entries?).

Does anyone use the default persistence storage mechanism or are you using
something like memcached or redis via lua?

What limits and problems have you run into?

Thanks.

-- 
Osama Elnaggar