Nancy icon indicating copy to clipboard operation
Nancy copied to clipboard

Is it safe to self host nancy and open to the internet?

Open NateKomodo opened this issue 6 years ago • 3 comments

Is it safe to put a nancy self hosted server into production and internet facing (Behind cloud flare of course)?

Also, whats the effect of slowlorris or similar attacks on nancy? i read the maximum connection count was determined as half the logical core count, which seems like it could be flooded easily with slowlorris connections.

NateKomodo avatar Sep 21 '19 21:09 NateKomodo

You haven't stated how you plan to self-host (i.e. HTTP.sys or Kestrel), but in either case, nancy is really not the relevant factor here - it's the HTTP server. HTTP.sys has long been considered production-ready, and Kestrel is also considered production-ready now.

DISCLAIMER: Not a Nancy maintainer, just a Nancy user.

cocowalla avatar Sep 21 '19 22:09 cocowalla

You haven't stated how you plan to self-host (i.e. HTTP.sys or Kestrel), but in either case, nancy is really not the relevant factor here - it's the HTTP server. HTTP.sys has long been considered production-ready, and Kestrel is also considered production-ready now.

DISCLAIMER: Not a Nancy maintainer, just a Nancy user.

Is the default in nancy http.sys?

NateKomodo avatar Sep 21 '19 22:09 NateKomodo

It really depends what precisely you are doing, and what framework you are targeting.

cocowalla avatar Sep 21 '19 22:09 cocowalla