Sikka

Overview

Sikka is an innovative application-level firewall specifically designed for Meteor applications. It addresses a critical aspect of application security by enabling developers to detect and block malicious users effectively. With built-in rate limiting and comprehensive user verification mechanisms, Sikka not only safeguards your app but also ensures that genuine users maintain uninterrupted access.

Setting up Sikka is straightforward, as it comes with sensible default configurations suitable for common Meteor applications. However, it allows for extensive customization, so developers can tweak the settings according to their specific needs. The ongoing development and the roadmap promise exciting enhancements in the future, making Sikka a compelling choice for developers looking to fortify their apps.

Features

• DDP Rate Limiting: Configure a maximum number of Data Distribution Protocol (DDP) requests per IP, blocking any IP that exceeds this limit temporarily, effectively protecting your app from abuse.

• Human Verification (Captcha Support): Introduces a human verification step via captcha to differentiate legitimate users from potential attackers, ensuring that real users can still access the app during an attack.

• Human Only Mode: In case of an attack, this feature allows the app to reject all DDP requests and require human verification by default, providing an extra layer of defense.

• Configurable Environment Variables: Most settings in Sikka can be customized through environment variables or Meteor.settings key, offering flexibility to adapt the firewall behavior to fit specific use cases.

• Pre-Configured Captcha Support: Comes with default captcha keys for local development, making initial setup easier while recommending that users obtain their keys for production use.

• Time-Based IP Blocking: Blocked IP addresses can be set to remain blocked for a specified duration, minimizing impact on overall app performance while limiting malicious behavior.

• Comprehensive Documentation: Well-documented configuration parameters to guide users in adjusting settings accurately as per their application requirements.

• Solid Testing and Compatibility: Thorough testing with various Meteor deployment techniques ensures that Sikka works seamlessly within different environments, providing confident assurance to developers.