[Serusers] SER performance degrades dramatically when invalid users send REGISTER messages continuously

[Jan Janak]

On 02-12-2005 11:26, Juha Heinanen wrote:
> Klaus Darilion said:
> 
> > If the username/password is wrong, the Radius server should reply
> > with Authentication-Reject, thus the sip proxy should reply with
> > 401/403. This should not need more time then the reply for a successful
> > authentication.
> 
> depends on the radius server and its reject delay.  it would be a good
> idea to have reejct delay built in to ser so that it would apply no matter
> what kind of authentication is in question.

  Alternatively you can block excessive traffic using pike module. SER
  could just drop incoming messages if the amount of traffic exceeds
  some threshold, and send back "4xx Too Much Traffic" once in a while
  to notify the user that he should slow down/replace the ua. Once in a
  while pike would let the icoming message through.

      Jan.