npub1tkq8unhsd5jqx6ueex5lcpsgknrpquxuk44ftpjlpm3ulaake7xs76txrw/ngit-grasp-mirror/docs/explanation/defensive-measures.md, branch masterUnnamed repository; edit this file 'description' to name the repository.
https://upleb.uk/npub1tkq8unhsd5jqx6ueex5lcpsgknrpquxuk44ftpjlpm3ulaake7xs76txrw/ngit-grasp-mirror/atom?h=master2026-01-14T13:40:20+00:00docs: add defensive measures explanation2026-01-14T13:40:20+00:00DanConwayDevDanConwayDev@protonmail.com2026-01-14T13:40:20+00:00urn:sha1:2821578202d1313c23c30a5dbae39548822e3c55
Add comprehensive documentation explaining the defensive features
implemented in ngit-grasp. The detailed analysis of other relay
implementations is now preserved in commit history (e3792b9).
Add explicit rate limits and total connection limit2026-01-14T13:40:03+00:00DanConwayDevDanConwayDev@protonmail.com2026-01-14T11:42:05+00:00urn:sha1:50000cd9d47681390c3c45feef98fe51c7b79a0f
- Make RateLimit explicit in relay builder (500 subs, 60 events/min)
- Add NGIT_MAX_CONNECTIONS config option (default: 500)
- Update all 4 config locations (src, nix, docs, .env.example)
- Fix documentation error: filter limit 5000→500
- Document Phase 2 deferral decision (per-IP enforcement)
Addresses primary DoS vector (connection exhaustion) with minimal code.
Per-IP rate limiting deferred until abuse detected in production.
Related: issue ff38 (git endpoint throttling - separate concern)