rcourtman d5f59ae858 Increase rate limiting for startup bursts ...

Increased default rate limits to handle Pulse startup polling:
- Per-peer burst: 5 → 10 requests (handles multi-node clusters with retries)
- Per-peer interval: 1s → 500ms (1 QPS → 2 QPS, 60/min → 120/min)

This prevents the proxy from being disabled during Pulse startup when it
polls all nodes simultaneously. The previous limits were too restrictive
for clusters with 3+ nodes.

2025-11-13 15:42:26 +00:00

..

audit_test.go

Make pulse-sensor-proxy resilient to read-only filesystems

2025-11-06 00:18:51 +00:00

audit.go

Make pulse-sensor-proxy resilient to read-only filesystems

2025-11-06 00:18:51 +00:00

auth_test.go

feat(security): Implement GID authorization enforcement

2025-11-07 17:09:16 +00:00

auth.go

feat(security): Implement range-based rate limiting

2025-11-07 17:08:45 +00:00

capabilities.go

feat(security): Add capability-based authorization

2025-11-07 17:09:32 +00:00

cleanup.go

feat: add comprehensive node cleanup system

2025-10-17 18:53:45 +00:00

config.example.yaml

feat(security): Add node allowlist validation to prevent SSRF attacks

2025-11-07 17:08:28 +00:00

config.go

feat(security): Add node allowlist validation to prevent SSRF attacks

2025-11-07 17:08:28 +00:00

main_test.go

feat(security): Add capability-based authorization

2025-11-07 17:09:32 +00:00

main.go

Fix persistent temperature monitoring issues for standalone Proxmox nodes (addresses #571)

2025-11-09 16:53:14 +00:00

metrics.go

feat(security): Add node allowlist validation to prevent SSRF attacks

2025-11-07 17:08:28 +00:00

ssh_test.go

Add critical safety guards to temperature proxy installation

2025-11-13 10:26:46 +00:00

ssh.go

Address Codex security review feedback

2025-11-13 13:55:26 +00:00

throttle_test.go

feat(security): Implement range-based rate limiting

2025-11-07 17:08:45 +00:00

throttle.go

Increase rate limiting for startup bursts

2025-11-13 15:42:26 +00:00

validation_fuzz_test.go

security: complete Phase 1 sensor proxy hardening

2025-10-20 15:13:37 +00:00

validation_test.go

Improve sensor proxy cluster validation (Related to #703)

2025-11-12 19:17:45 +00:00

validation.go

Fix security regression: use localhost-only fallback instead of permissive mode

2025-11-13 14:15:51 +00:00