The common role baselines the firewall configuration on managed machines. This includes firewall rules that are used to rate-limit incoming connections from individual IP addresses in order to avoid resource exhaustion.

At the moment the role tests perform some basic testing to ensure the firewall rules are in place, but there is no functional testing to ensure that the connections will get dropped once the rate limit has been exceeded.

It would be beneficial to implement some additional functional tests to ensure the firewall rules are functioning as intended.

The following should be done:

• Update the common role.
  • Implement functional tests for verifying incoming connection rate-limiting.
• Update role reference documentation, usage instructions, and release notes as required.