OpenBSD sshd(8) new PerSourceMaxStartups option

I found this option when reading about the new changes made between OpenBSD 6.8 and -current. [0]

The first option "PerSourceMaxStartups" configures how many times a new source can open new connections to sshd(8). The second option "PerSourceNetBlockSize" lets you specify how strict the source check is in the form of number of bits per IPv4 or IPv6 address, e.g. "32" for a single host or "24" for a typical /24 network.

The options are disabled by default so your current sshd_config(5) will continue to work fine.

I think this is a really great addition that may complement or even replace other forms of sshd(8) protection like fail2ban.

https://www.openbsd.org/plus.html