Lab 2: Write a scenario and test it in simulation

What you will learn in this TP

• Understand a line with explain
• Write a leaky scenario
• Use simulation
• Protect a trusted IP

Introduction #

What you will learn in this section

• Understand a line with explain
• Write a leaky scenario
• Use simulation
• Protect a trusted IP

Context. Your application returns 401 on /login on failure. You want a custom rule, tested before blocking.

Prerequisites: lab 1  ·  Estimated time: 40 min

Setup #

Guided steps, with their solution.

1. 1. Understand a line

   Follow the path of an Nginx line.

2. 2. Write the scenario

   Why? Four failures in a burst is an attack; an occasional failure is human error.

   Add the file to the container, then restart.

3. 3. Switch to simulation

   Trigger the scenario in simulation.

4. 4. Protect a trusted IP

   Add the range to an allowlist and see decisions removed.

Difficulty level : ●●○○○ (2/5)