0

I are running GitLab - Version:10.0.3 and encountered the Forbidden error and Gitlab is forbidding our own office IP. I have already added our office IP in the gitlab_rails['rack_attack_git_basic_auth'] section in gitlab.rb file and also restart gitlab gitlab-ctl restart but still no luck. Please help to resolve.

GitLab information Version: 10.0.3

Thanks

Srihari
  • 31
  • 6

1 Answers1

0

The whitelist you defined is only used for the 'Fail2Ban' part (basic auth brute-forcing) of the Rack attack gem.

For throttling there is no whitelist configurable via gitlab.rb at present.

You can tune the behaviour of the throttling part of Rack Attack in general via gitlab.rb by adding below options (experiment with the values)

#gitlab_rails['rate_limit_requests_per_period'] = 10
#gitlab_rails['rate_limit_period'] = 60

Don't forget to do a gitlab-ctl reconfigure (maybe you did, but you did not mention it explicitly)

Joost Evertse
  • 1,065
  • 7
  • 8