Is it safe to self host nancy and open to the internet?
Is it safe to put a nancy self hosted server into production and internet facing (Behind cloud flare of course)?
Also, whats the effect of slowlorris or similar attacks on nancy? i read the maximum connection count was determined as half the logical core count, which seems like it could be flooded easily with slowlorris connections.
You haven't stated how you plan to self-host (i.e. HTTP.sys or Kestrel), but in either case, nancy is really not the relevant factor here - it's the HTTP server. HTTP.sys has long been considered production-ready, and Kestrel is also considered production-ready now.
DISCLAIMER: Not a Nancy maintainer, just a Nancy user.
You haven't stated how you plan to self-host (i.e. HTTP.sys or Kestrel), but in either case, nancy is really not the relevant factor here - it's the HTTP server. HTTP.sys has long been considered production-ready, and Kestrel is also considered production-ready now.
DISCLAIMER: Not a Nancy maintainer, just a Nancy user.
Is the default in nancy http.sys?
It really depends what precisely you are doing, and what framework you are targeting.