Skip to content
This repository has been archived by the owner on Jan 24, 2021. It is now read-only.

Is it safe to self host nancy and open to the internet? #2984

Open
NateKomodo opened this issue Sep 21, 2019 · 3 comments
Open

Is it safe to self host nancy and open to the internet? #2984

NateKomodo opened this issue Sep 21, 2019 · 3 comments

Comments

@NateKomodo
Copy link

Is it safe to put a nancy self hosted server into production and internet facing (Behind cloud flare of course)?

Also, whats the effect of slowlorris or similar attacks on nancy? i read the maximum connection count was determined as half the logical core count, which seems like it could be flooded easily with slowlorris connections.

@cocowalla
Copy link

You haven't stated how you plan to self-host (i.e. HTTP.sys or Kestrel), but in either case, nancy is really not the relevant factor here - it's the HTTP server. HTTP.sys has long been considered production-ready, and Kestrel is also considered production-ready now.

DISCLAIMER: Not a Nancy maintainer, just a Nancy user.

@NateKomodo
Copy link
Author

You haven't stated how you plan to self-host (i.e. HTTP.sys or Kestrel), but in either case, nancy is really not the relevant factor here - it's the HTTP server. HTTP.sys has long been considered production-ready, and Kestrel is also considered production-ready now.

DISCLAIMER: Not a Nancy maintainer, just a Nancy user.

Is the default in nancy http.sys?

@cocowalla
Copy link

It really depends what precisely you are doing, and what framework you are targeting.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants