diff options
| author | Evan Read <eread@gitlab.com> | 2019-08-28 15:57:20 +1000 |
|---|---|---|
| committer | Evan Read <eread@gitlab.com> | 2019-08-28 15:57:20 +1000 |
| commit | 46f7674733c6289e7ced13fb86f66de792ff5eac (patch) | |
| tree | a3f15bfe6df2dd12bcb87ae82a37e7af7103d60f | |
| parent | fb276565297f8fd77f0dc1c8e51a42fec8697fce (diff) | |
| download | gitlab-ce-docs/edit-limit-text.tar.gz | |
Edit limit textdocs/edit-limit-text
| -rw-r--r-- | doc/security/rack_attack.md | 9 | ||||
| -rw-r--r-- | doc/user/gitlab_com/index.md | 9 |
2 files changed, 10 insertions, 8 deletions
diff --git a/doc/security/rack_attack.md b/doc/security/rack_attack.md index 4ad5fd0d16c..09d29bf3446 100644 --- a/doc/security/rack_attack.md +++ b/doc/security/rack_attack.md @@ -77,11 +77,12 @@ authentication requests were received in a 3-minute period from a single IP addr This applies only to Git requests and container registry (`/jwt/auth`) requests (combined). -This limit is reset by requests that authenticate successfully. For example, 29 -failed authentication requests followed by 1 successful request, followed by 29 -more failed authentication requests would not trigger a ban. +This limit: -JWT requests authenticated by gitlab-ci-token are excluded from this limit. +- Is reset by requests that authenticate successfully. For example, 29 + failed authentication requests followed by 1 successful request, followed by 29 + more failed authentication requests would not trigger a ban. +- Does not apply to JWT requests authenticated by `gitlab-ci-token`. No response headers are provided. diff --git a/doc/user/gitlab_com/index.md b/doc/user/gitlab_com/index.md index 8f1048260f2..72beb38fe76 100644 --- a/doc/user/gitlab_com/index.md +++ b/doc/user/gitlab_com/index.md @@ -320,11 +320,12 @@ authentication requests were received in a 3-minute period from a single IP addr This applies only to Git requests and container registry (`/jwt/auth`) requests (combined). -This limit is reset by requests that authenticate successfully. For example, 29 -failed authentication requests followed by 1 successful request, followed by 29 -more failed authentication requests would not trigger a ban. +This limit: -JWT requests authenticated by gitlab-ci-token are excluded from this limit. +- Is reset by requests that authenticate successfully. For example, 29 + failed authentication requests followed by 1 successful request, followed by 29 + more failed authentication requests would not trigger a ban. +- Does not apply to JWT requests authenticated by `gitlab-ci-token`. No response headers are provided. |