How to protect your Vercel site from attackers

Поделиться
HTML-код
  • Опубликовано: 27 сен 2024

Комментарии • 32

  • @Nusab33
    @Nusab33 6 месяцев назад +18

    To be able to set a budget and pause production deployments is very helpful for me. And I think others will like it too! :D

  • @000-way7
    @000-way7 6 месяцев назад +17

    Vercel's answer to $104,000 Netlify bill on serveless horrors

  • @basketberoende
    @basketberoende 6 месяцев назад

    This is why I love you guys. Making WebDev so simple

  • @xReDxTuRtLeZx
    @xReDxTuRtLeZx 6 месяцев назад

    thats awesome! really cool to see this come up so soon after that other vid where you mentioned vercel was cooking up something for this

  • @philipaarseth
    @philipaarseth 6 месяцев назад +10

    Would be nice to add a toggle so that you can either let it turn on automatically (and off when spike usage dies down) and notify admin OR notify admin on usage spike and ask if mode should be enabled.

    • @leerob
      @leerob 6 месяцев назад +2

      Vercel automatically serves challenges (same screen) when it can detect malicious traffic. Attack Challenge Mode is when you want to manually flip it on. For notifying admin, are you thinking an email to the Team owner?

  • @zhanezar
    @zhanezar 6 месяцев назад

    really great work guys, always believed you would find a way to help with these horror stories on twitter.

  • @rhysyw97
    @rhysyw97 6 месяцев назад +2

    If the rate limiting is in the middleware, Vercel charges per-middleware invocation so you'd still incur a potential large bill if the rate limit is triggered a lot?

  • @AjaySingh-jz8qx
    @AjaySingh-jz8qx 2 месяца назад +1

    Is it still going to work on advanced ddos attacks

  • @yassinesafraoui
    @yassinesafraoui 6 месяцев назад

    It would be very interesting to have an option to automatically turn on this mode when the number of requests are over a certain limit or sth like that, maybe when the number of requests is greater than 3 times the avg for example, you get the drill

  • @jonoisedev
    @jonoisedev 6 месяцев назад

    Great feature!

  • @enza9189
    @enza9189 6 месяцев назад +2

    Nice

  • @julienben
    @julienben 6 месяцев назад +2

    Great to have this! Quick question: Is there any way to turn it on without breaking uptime monitoring? Somehow?

  • @ttowe
    @ttowe 6 месяцев назад

    omg, love it

  • @freakinmonkey85
    @freakinmonkey85 6 месяцев назад +1

    Does attack challenge mode also protect api routes?

    • @leerob
      @leerob 6 месяцев назад +4

      Yeah!

  • @JamesJGoodwin
    @JamesJGoodwin 6 месяцев назад +1

    What are the advantages of Attack Challenge Mode compared to Cloudflare "I'm under attack" mode?

  • @powaaaka
    @powaaaka 4 месяца назад

    midudev?

  • @bobbymray
    @bobbymray 6 месяцев назад +2

    Support Palestine

  • @nico0lat3
    @nico0lat3 4 месяца назад

    @midudev sacaron este video gracias a ti ajajaja

  • @zlackbiro
    @zlackbiro 6 месяцев назад

    Using Vercel in 2024 in the era of cheap VPS is simply dumb.

  • @kasper369
    @kasper369 3 месяца назад

    It's taking longer to verification

  • @DominikSipowicz
    @DominikSipowicz 6 месяцев назад +1

    As always amazing content! Thanks Lee!

  • @cguser
    @cguser 6 месяцев назад +3

    can vercel send notification when there's a vulnerability checked found?

  • @PhiliprecordsTV
    @PhiliprecordsTV 6 месяцев назад

    Will attack challenge mode block crawlers like googlebot? can it effect page rankings?

  • @pranshubasak8796
    @pranshubasak8796 6 месяцев назад

    Just add a button restric bill thats it , is it to much to ask

  • @utuberlol
    @utuberlol 6 месяцев назад

    This is great to see, youre always listening to your costumers and iterating

  • @jjrise
    @jjrise 6 месяцев назад

    love it

  • @koko0808008
    @koko0808008 6 месяцев назад

    Can we have proper CSP documentation? Nothing is working out of the box (fresh install + documentation followed)