In computer networks, rate limiting is used to control the rate of traffic sent or received on a network interface.

learn more… | top users | synonyms (2)

-1
votes
1answer
13 views

nginx rate limitinf unknown directive

I'm trying to set up a rate limit for bots using my website, but if i add limit_req_zone $binary_remote_addr zone=one:10m rate=1r/s; or anything of the sort to /etc/nginx/nginx.conf in the http ...
1
vote
1answer
36 views

Relax ssh rate-limit rules for certain ip addresses

We've written some tools to automate common development tasks. One tool, for example, ensures all our git repositories are up-to-date. For this to work, our tool needs to connect to our git server and ...
0
votes
1answer
113 views

Linux Traffic Shaping with “tc”: QoS filter for requests directly on the host not applied?

I'm trying to reduce the interface thoughput to debug my application on slower network speed. I've remembered a tc statement to do this on a interface which was working in the past. I used it on a ...
1
vote
0answers
39 views

Debian exim4 rate limits

I try to limit on exim4 the outgoing mails per day per domain, i found this: acl_check_ratelimit: accept authenticated = * endpass ratelimit = 40 / 1d / per_rcpt / ...
0
votes
1answer
348 views

Nginx $http_x_forwarded_for not always being set

I've noticed in our access logs that sometimes, the $http_x_forwarded_for variable has not been set, and instead, the correct IP is the one set to $remote_addr. Is it possible to set ...
1
vote
1answer
99 views

nginx 301'ing limit_req rate limited requests instead of error page

I have a bulk search form on apache servers behind nginx. I'd like to protect that location so that the second request in a 10 minute period gets 301'd to a "Would you like to use our API" page ...
0
votes
0answers
74 views

Logging HAProxy connection limiting

I have some simple connection and connection rate limiting in HAProxy: # Store IPs to limit connection rate stick-table type ip size 200k expire 5m store gpc0,conn_cur,conn_rate(10s) ...
0
votes
0answers
59 views

Limit concurrent connections in nginx across multiple servers

I am running a download service with free and paid premium membership types. The free membership should be restricted to one concurrent download. I know how to accomplish this when only one server ...
-3
votes
1answer
96 views

Google-style “Your network is generating too much traffic” bounce for postfix

I'm being attacked from a botnet and I found out about it because I got this email from mailer-daemon telling me there's no space left on device. The mail.log was filled up with messages like Dec 5 ...
1
vote
0answers
71 views

nginx and cloudlfare ip confusion?

I am using the below config in http block of my nginx.conf to get real ip while using Cloudflare acceleration service: ## Cloudflare settings to get Real IP's set_real_ip_from ...
2
votes
1answer
59 views

Protect a public-facing PostgreSQL server against abuse

I have a Postgres database containing public information that I'd like to expose to the internet, for anyone to use. What steps can I take to prevent: Excessively expensive queries that could hog ...
0
votes
2answers
141 views

How to prevent nginx throttling conflicting with maintenance mode?

We use the HttpLimitReqModule nginx mondule for rate throttling and have found that it conflicts with our "maintenance mode" because both components are using http status code 503. When throttling is ...
0
votes
0answers
335 views

Is CSF's recommended Connection Tracking Limit (CT_LIMIT) of 300 connections reasonable?

CSF recommends setting CT_LIMIT to 300 to block small ddos attacks as per http://configserver.com/free/csf/readme.txt I Would like to enable this connection limiting / tracking via CSF, as I have ...
-1
votes
2answers
141 views

Nginx Rate Limiting by Referrer?

I've successfully set up rate limiting on IP addresses like so, limit_req_zone $binary_remote_addr zone=one:10m rate=1r/s; But I was wondering if its possible to do the same on referrers? For ...
2
votes
0answers
340 views

Limiting bandwidth with hashlimit (e.g. kb/s — not connections!) doesn't work, though the man page says it should

According to the iptables-extensions man page hashlimit can do bandwidth limiting: "flows exceeding 512kbyte/s" => --hashlimit-mode srcip,dstip,srcport,dstport --hashlimit-above 512kb/s ...
1
vote
1answer
53 views

lighttpd rate limits per directory

I'm creating a site with a large number of small tools. One is a tool which uses a Python cgi-script that interacts with the Natural Language Toolkit (nltk), which is disk and CPU intensive. I have ...
0
votes
1answer
59 views

Rate Limit Xen DomU Network Traffic

Is there a solid way to rate limit Xen DomU Network I/O Traffic? I found an answer on here using tc but I get this error: Object "qdisk" is unknown, try "tc help". I guess a solution to either of ...
1
vote
2answers
736 views

DNS query limit WinServer 2008R2

Situation: I am currently seeing a huge wave of incoming DNS requests arriving in burst of around 85 queries per 2-3 seconds from one IP. Then another IP sends a new wave and so on (currently my DNS ...
2
votes
1answer
91 views

Mail server - limit connections on port 25 to 1 PC alone

I have a situation where only one PC on a network (network is behind a single public IP address) can connect to the mail server on port 25 (send out emails using Outlook, perform successful telnet ...
1
vote
1answer
100 views

Will traffic control software cause tcp packets to be dropped

I am testing our client-server applications using NetLimiter which is a traffic control software. I found that, when client is receiving files from server and I use NetLimiter to set the download rate ...
0
votes
1answer
758 views

Is using iptables to rate limit on port 80 considered wasteful?

I was thinking of adding the following rule to my IP tables: -A INPUT -p tcp -m state --state NEW -m recent --update --dport 80 --seconds 5 --hitcount 10 -j DROP -A INPUT -p tcp -m state --state NEW ...
0
votes
2answers
383 views

Dynamic throttling of bandwidth

I am planning on setting up streaming server. Streaming is done kind of like YT does it; there will be a large number of audio content and each user can listen to it right on the website. In order ...
0
votes
0answers
99 views

Dovecot: Limit time between connects?

some of my Postbox users are checking mail every 10 or 20 Seconds. It is somehow possible configure Dovecot to limit the time between every login to 1 minute?
0
votes
1answer
343 views

How to use limit_conn and limit_req modules of Nginx when it is behind HAProxy

I'm using limit_conn_zone (with limit_conn) and limit_req_zone (with limit_req) in Nginx which sits behind a HAProxy. They both run on the same host. I see whenever a limit is breached in Nginx ...
3
votes
2answers
1k views

nginx rate limiting with X-Forwarded-For header

I'm looking into rate-limiting using nginx's HttpLimitReqModule. However, requests are all coming from the same IP (a loadbalancer), with the real IP address in the headers. Is there a way to have ...
2
votes
1answer
343 views

Reasonable rate limiting settings with PF firewall

I have the following settings in my pf.conf to dissuade abusive clients (I get a few a day that are obviously just scraping content indiscriminately and slow everything down): pass in on $ext_if ...
0
votes
1answer
1k views

e-mail ratelimit exim

Server1 sending to Server2: Connecting to domain.com [1.1.1.1]:25 ... connected SMTP<< 451 Temporary local problem - please try later SMTP>> QUIT LOG: MAIN SMTP error from remote ...
1
vote
0answers
132 views

How to slow down ftp upload on windows 7

I have an application that uses ftp on windows 7 or 8 and it fails trying to upload a file (time out, server sends back RST packets so it's definitely the server that's unhappy) to a specific server. ...
-1
votes
2answers
361 views

How to rate limit per MAC address?

I need to rate limit an API server. Is it possible to configure a machine to rate limit requests per MAC address? If not, are there any other viable options? I want to rate limit per MAC, because ...
1
vote
2answers
152 views

Easy Apache module to throttle requests based on machine load?

I have an Apache server that is serving a django application with mod_wsgi. I'm wondering if there is a simple way to throttle requests at the apache level based on the machine's load. Ideally I want ...
1
vote
1answer
150 views

ICMP rate-limit on time-exceeded messages

How can I set ICMP rate-limiting in a Cisco router? Here on the manual page they only talk about ICMP unreachable messages: ip icmp rate-limit unreachable [df] [ms] [log [packets] [interval-ms]] ...
2
votes
0answers
854 views

VLAN based rate limiting using tc

I have been trying to perform VLAN based rate limiting on an academic project I am working on. The project uses Openflow (with Beacon controller) and the network is emulated using Mininet. The network ...
5
votes
1answer
531 views

Mysterious bandwidth limit

For some unknown reason, our server box running Windows Server 2008 R2 has a per connection bandwidth limit of 0.2 MB/s. Meaning, while one TCP connection can pull at max 0.2 MB/s, 60 parallel ...
2
votes
1answer
174 views

Best way for automated ban / throttle of aggressive clients on a Linux / Apache webserver for a period of time?

I notice occasional spikes on my server load and when I check access logs I notice a pattern for some automated forum poster that tries to repeatedly access a comment/reply URL. What would be the best ...
0
votes
4answers
936 views

How to tune Linux kernel to withstand DDoS? (HAProxy)

Please do not reply with "this is not possible", as it's waste of time. I am developing cloud appliance and I have a valid reason to protect this layer against DDoS, and there are few companies doing ...
2
votes
1answer
224 views

How can I prevent postfix from sending thousands of emails?

I have a Django installation that is configured to email administrators (five of us) whenever an error occurs. All of the generated emails are directed to postfix and then on to the mail server for ...
-1
votes
1answer
726 views

squid proxy 2.7 limit bandwidth [closed]

I have a squid 2.7 proxy and i'm letting some friends use it for fun in school etc. However since i got a bandwidth limit on my vps that is hosting the proxy I need somehow to throttle the amount of ...
0
votes
1answer
1k views

How efficient is iptables' hashlimit module?

I'm looking for a solution to rate-limit on an ip basis. How many packets can the hashlimit iptables module handle on a recent Intel x86_64 CPU core? 1.000/sec? 1.000.000/sec?
3
votes
1answer
1k views

Rate Limiting with HP ProCurve 5406 QOS

Is it possible to enable an absolute value rate limit using QOS on a HP ProCurve 5406 switch for a particular IP address on a specific port? We have a 10Mbps head end connection for multiple ...
4
votes
2answers
997 views

rsync ionice destination

To avoid rsync to starve the system and network we use ionice when starting rsync and set the --bwlimit parameter. For example: ionice -c2 -n7 rsync -aH --bwlimit=30000 /foo root@dest.com:/ This ...
3
votes
1answer
539 views

using trickle to slow down browser

according to trickle's man page, http://linux.die.net/man/1/trickle i can limit the download speed of a process, e.g. trickle -u 10 -d 20 ncftp to Launch ncftp(1) limiting its upload capacity to 10 ...
6
votes
3answers
3k views

Rate limiting with UFW: setting limits

UFW's man page mentions that it can setup iptables rate limiting for me: ufw supports connection rate limiting, which is useful for protecting against brute-force login attacks. ufw ...
1
vote
1answer
465 views

Linux dynamic rate limiting/throttling

I'm running a video streaming website with lighttpd using http pseudo-streaming to deliver videos. If the user has a very fast connection, this can use bandwidth quite inefficiently. For example if ...
1
vote
1answer
1k views

HAProxy stops accepting connections

I've been using HAProxy to loadbalance my appservers for many months without problems. Recently some traffic spikes have lead me to setting the maxconn parameter to rate-limit connections to my ...
2
votes
1answer
368 views

Block UDP traffic by rate/string-match on Windows 2008

I am administrating a Windows 2008 server (64-bit). It is being subjected to a focused set of DOS attacks where UDP packets are sent to a specific port and contain a specific string. What I need to ...
0
votes
0answers
298 views

Different limit_req depending on get argument in Nginx

How can I use different limit_req for one location depending if a get-argument is present or not? In logic: if($_GET['a']){ applyLimitA(); }else{ applyLimitB(); } I have achieved this but ...
-1
votes
1answer
357 views

Enforce maximum download limit using router hardware?

What's the simplest way to enforce a maximum download limit per machine on a network, over a period of time? For example, 10 GB, per computer, per week? I'm hoping maybe there's either a custom ...
0
votes
1answer
440 views

Is there a rate limiting tool for linux that can limit rates per process or socket?

I found tc, which allows you to filter by ip, port etc. and then limit rates. But I was wondering if there was anything that could filter by application or limit rate given another process' socket .. ...
0
votes
1answer
269 views

Few requests/sec, but choke Apache and spike CPU

We have two load balancers running HAProxy which serve requests to an application server. We've recently been getting spikes of traffic from script kiddies running vulnerability checks against our ...
3
votes
2answers
5k views

Should I rate-limit packets with iptables?

I'm using iptables on Ubuntu Server. It's a web server on a VPS. I'd like to know if I should rate-limit packets. If so, what should I rate-limit? And should I do so globally or per IP address? ...