HAProxy Enterprise Documentation 2.3r1

Response Policies

Response policies let you perform an action on a suspicious connection or request. For example, you might deny an HTTP request if it doesn't include a specific URL parameter such as an API token value. Or, you might tarpit clients that you suspect to be automated bots.

You first define ACLs, which are rules for when to flag a client. An ACL evaluates a characteristic of a connection or request, such as whether the request includes a particular URL parameter. It always returns either true or false. You then use a response policy to take action against flagged clients.

Deny

Deny a client's HTTP request or a server's response

reCAPTCHA

Present a Google reCAPTCHA to a user

Reject

Reject an HTTP or TCP request

Shadowban

Shadowban a client by sending them to a dummy resource

Silent Drop

Silenty drop a client's HTTP request without notifying the client that the connection has been closed

Tarpit

Stall a client's request for a period of time before returning an error response


Next up

Deny