Got it

How to configure Anti-DoS/Anti-DDoS for VNC login

Created: Feb 22, 2022 08:57:31Latest reply: Feb 22, 2022 09:03:20 129 1 0 0 0
  HiCoins as reward: 0 (problem unresolved)

Hello, friends!

Do you know how to configure Anti-DoS/Anti-DDoS for VNC login?

Product: Huawei Cloud Stack 8.0.1.

Thanks in advance!


  • x
  • convention:

Featured Answers
olive.zhao
Admin Created Feb 22, 2022 09:03:20

Hello, friend!

You can change the minimum interval for login to VMs using Virtual Network Computing (VNC), thereby enabling anti-DoS/anti-DDoS for VNC login.

1. Use PuTTY to log in to any FusionSphere OpenStack node in the AZ using the IP address corresponding to the Reverse-Proxy field.

The default user name is fsp. The default password is Huawei@CLOUD8.

2. Run the following command and enter the password Huawei@CLOUD8! of the root user to switch to the root user:

su - root

3. Run the following command to disable user logout upon system timeout:

TMOUT=0

4. Import environment variables. For details, see Importing Environment Variables.

5. Run the following commands to configure the interval for VNC login:

cps template-params-update --service nova nova-api --parameter vnc_url_request_interval=10

cps template-params-update --service nova nova-api --parameter serial_url_request_interval=10

cps commit

  • vnc_url_request_interval specifies the minimum interval (in seconds) at which one nova-api node is allowed to request the URL for logging in to a VM again. Set the time interval as required.

  • serial_url_request_interval specifies the minimum interval (in seconds) at which one nova-api node is allowed to request the URL for logging in to a bare metal server again. Set the time interval as required.

    For example, if vnc_url_request_interval or serial_url_request_interval is set to 10, one nova-api node cannot request the login URL again within 10 seconds.

Hope this helps!

View more
  • x
  • convention:

All Answers
olive.zhao
olive.zhao Admin Created Feb 22, 2022 09:03:20

Hello, friend!

You can change the minimum interval for login to VMs using Virtual Network Computing (VNC), thereby enabling anti-DoS/anti-DDoS for VNC login.

1. Use PuTTY to log in to any FusionSphere OpenStack node in the AZ using the IP address corresponding to the Reverse-Proxy field.

The default user name is fsp. The default password is Huawei@CLOUD8.

2. Run the following command and enter the password Huawei@CLOUD8! of the root user to switch to the root user:

su - root

3. Run the following command to disable user logout upon system timeout:

TMOUT=0

4. Import environment variables. For details, see Importing Environment Variables.

5. Run the following commands to configure the interval for VNC login:

cps template-params-update --service nova nova-api --parameter vnc_url_request_interval=10

cps template-params-update --service nova nova-api --parameter serial_url_request_interval=10

cps commit

  • vnc_url_request_interval specifies the minimum interval (in seconds) at which one nova-api node is allowed to request the URL for logging in to a VM again. Set the time interval as required.

  • serial_url_request_interval specifies the minimum interval (in seconds) at which one nova-api node is allowed to request the URL for logging in to a bare metal server again. Set the time interval as required.

    For example, if vnc_url_request_interval or serial_url_request_interval is set to 10, one nova-api node cannot request the login URL again within 10 seconds.

Hope this helps!

View more
  • x
  • convention:

Comment

You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.
Information Protection Guide
Thanks for using Huawei Enterprise Support Community! We will help you learn how we collect, use, store and share your personal information and the rights you have in accordance with Privacy Policy and User Agreement.