In computer networks, rate limiting is used to control the rate of traffic sent or received on a network interface.

learn more… | top users | synonyms (1)

1
vote
2answers
1k views

Rate limit exim per user basis

How can I implement "rate limit" in Exim so that every user in my exim can send specific number of emails per day. List A of Users can send 100 emails per day and the list B of users can send 500 ...
2
votes
1answer
35 views

Postfix - rate limit outgoing concurrent connections to one machine/ip

I need to limit postfix outgoing connections for specific mailservers, but it seems to me that posfix's limiting is based on domains? What if there is one mailserver for more domains? I tried to find ...
0
votes
0answers
23 views

Limiting bandwidth to a specific IP

My question is very similar to http://serverfault.com/a/191605/253872 however I wish not to limit someone on my network, but traffic from my server to a specific IP. In reference to the script in the ...
0
votes
1answer
63 views

Limit maximum requests / second for a specific path on HAProxy

I'm trying to achieve this scenario : On a specific path only, I receive a steady 9 requests/sec on the frontend. Everything is fine, use the regular Backend. I now receive 11 req/s, I want to reject ...
0
votes
1answer
61 views

QoS/traffic-limit on internal ports in OpenVSwitch

I am currently trying to put traffic control on our OpenStack cloud and my questions in one sentence would be: is it possible at all to rate-limit particular port with type internal? The whole story ...
0
votes
0answers
15 views

varnish flexible rate limit by api token

I have a REST API requires authentication via OAuth tokens. The tokens have different rate limits (10k, 100k, 1M, unlimited). I currently used for Node.JS with Expressjs and middleware (express ...
3
votes
1answer
189 views

nginx and cloudlfare ip confusion?

I am using the below config in http block of my nginx.conf to get real ip while using Cloudflare acceleration service: ## Cloudflare settings to get Real IP's set_real_ip_from ...
0
votes
0answers
20 views

iptables — capture pptp connection attempt packets and place into holding pattern

Problem I have a problem of too many simultaneous connection attempts to a vpn server causing all connections to drop. Staggering connection attempts fixes problem. How can I use iptables to do the ...
0
votes
0answers
39 views

Rate-limit Apache per IP for a specific page

I would like Apache to redirect to an error page when the number of requests per IP to a specific page (selected with regexp) is above some threshold. What is the simplest way to do that? What module ...
0
votes
2answers
108 views

Rate limit misconfigured bots

We have an Nginx / PHP-FPM behind a load balancer which periodically gets scraped. Many of the scrapers hit our application's 404 page quiet hard. Is there a way in Nginx, possibly with the ...
3
votes
1answer
682 views

Limiting bandwidth with hashlimit (e.g. kb/s — not connections!) doesn't work, though the man page says it should

According to the iptables-extensions man page hashlimit can do bandwidth limiting: "flows exceeding 512kbyte/s" => --hashlimit-mode srcip,dstip,srcport,dstport --hashlimit-above 512kb/s ...
3
votes
1answer
189 views

Common back pressure strategies for services under sustained high load

I'm wondering what are the common backpressure strategies people use for their web services? Imagine your service operates under heavy load, and at some point the load reaches 120% of your capacity. ...
-2
votes
1answer
139 views

How can I detect if an online backup service is doing IP-based throttling? [closed]

I live on a campus in the US and I am trying to understand why my upload speed to the online backup service Backblaze on area Y of the campus is 10 times slower than on area X of the campus (20000 vs ...
3
votes
2answers
234 views

Is there a way to rate limit connection attempts with firewalld?

On our CentOS 6 servers, I've used information from this article to reduce the brute force ssh attempts on our servers, specifically the rate limiting / logging section. Is there a way to do the same ...
0
votes
1answer
210 views

Is there a way to raite limit connections with HaProxy using multiple thresholds

I've implemented simple rate limiting using HaProxy in a similar fashion to the way StackExchange does it with HaProxy. I'm trying to make it a bit more advanced so that there are multiple thresholds ...
0
votes
1answer
66 views

Traffic shaping for upload/download speed simulation [duplicate]

I'm building a network emulator to help realize different speeds. Basically, this system would shape a given user's network metrics (such as upload speed/download speeds/packet loss/jitter etc) based ...
3
votes
2answers
2k views

Nginx - What is does the nodelay option do when limiting requests?

With the nginx HttpLimitReq module requests can be limited by IP. However, I'm not understanding what the "nodelay" option does. If the excess requests within the limit burst delay are not ...
0
votes
0answers
12 views

Dynamic rate limiting in NGINX using map [duplicate]

It's pretty well documented that you can do something like: map $http_authorization $rate_unauthed { "" $binary_remote_addr; default ""; } limit_req_zone $rate_unauthed zone=repositories:10m ...
0
votes
0answers
82 views

delay after 5 requests: rate limits? (and how to disable them)

I'm using the following configuration for my nginx server: upstream django { server unix:///var/www/example.com/django/ws/django.socket; } upstream io_nodes { ip_hash; server 127.0.0.1:8080; ...
1
vote
0answers
138 views

Rate limiting bots (specific IPs) in NGINX

I would like to rate-limit (but not block) various crawlers. Based on other examples of similar questions, I've come up with this: http { ## 10MB zone, 5 reqs per sec limit_req_zone $limit ...
1
vote
1answer
141 views

Debian exim4 rate limits

I try to limit on exim4 the outgoing mails per day per domain, i found this: acl_check_ratelimit: accept authenticated = * endpass ratelimit = 40 / 1d / per_rcpt / ...
0
votes
0answers
41 views

How to limit IP address if X amount of connections are made in certain time period?

Is there any solution that I can use in order to limit IP addresses depending on their connection. So in simple terms if a user connect to the site 60 times in a minute then block them for x amount ...
2
votes
1answer
99 views

Configuring RRL on a DNS server using BIND

I'd like to configure a DNS server to use Response Rate Limiting (RRL) to mitigate DNS DDoS attacks. Whatever, I have to configure it top use RRL with the 'slip' parameter at 2. I've made some ...
5
votes
2answers
1k views

using trickle to slow down browser

according to trickle's man page, http://linux.die.net/man/1/trickle i can limit the download speed of a process, e.g. trickle -u 10 -d 20 ncftp to Launch ncftp(1) limiting its upload capacity to 10 ...
0
votes
1answer
333 views

Logging HAProxy connection limiting

I have some simple connection and connection rate limiting in HAProxy: # Store IPs to limit connection rate stick-table type ip size 200k expire 5m store gpc0,conn_cur,conn_rate(10s) ...
0
votes
2answers
55 views

Massive blockingof ips done right

I run a website which is being abused every day with bots trying to send spam, not respecting robots.txt and so on. The biggest problem, however is repeating attempts to massively harvest website. ...
2
votes
1answer
7k views

Logstash, Kibana and email alerts

I am trying to setup email alerts using logstash. Right now it emails me EVERY time the pattern "Error" is parsed into my log file which can lead to a lot of unnecessary emails. I'd like to create a ...
1
vote
0answers
331 views

tc qdisc tbf - calculate sensible latency and burst from rate

I want to create a simple script that lets me limit the outgoing speed of an interface somewhere between 56k (modem speed) and 1MBit/s. I found that something along the following does the job: tc ...
2
votes
1answer
56 views

Postfix and smtpd_client_rate_limit to detect compromissed accounts

Some of our clients are administrators who need to send corporative messages to no more than 300 clients, specifying all of these clients together in the "To:" fields, instead of individual messages ...
0
votes
0answers
83 views

How to redirect to an other link when excess request (limit_req) with Nginx

I have been trying to limit the requests coming from a single IP address successful with module limit_req in Nginx. But now I want to redirect to an other web-page for showing some messages.How could ...
7
votes
2answers
4k views

How to rate-limit in nginx, but including/excluding certain IP addresses?

I'm able to use limit_req to rate-limit all requests to my server. However I'd like to remove the rate restriction for certain IP addresses (i.e. whitelist) and use a different rate restriction for ...
0
votes
0answers
242 views

tc-tbf rate limiting works on 100Mbit Ethernet, but not Gigabit ethernet, with Windows

I have a linux box I use as a firewall with Shorewall. I have traffic shaping enabled in order to prioritize traffic from one computer used for videoconferencing. My business has an upload speed of ...
1
vote
1answer
441 views

Nginx: How to limit request rate based on user agent

Trying to get the following behavior working in nginx A default rate limit of 1r/s for each ip when using a browser. A rate limit of 10r/s for bing and google spiders. Reject bad bots. Unfortunately ...
1
vote
0answers
396 views

Linux Traffic Controller (Linux tc): hierarchical token bucket (htb) packet queue size

In my Linux router, I am using the following configuration to limit the rate of traffic towards port 44444 of a client in the LAN (client address is 192.168.10.2, connected through the router's eth1 ...
1
vote
1answer
253 views

Limit max bandwidth per IP

I have some partners, that uses one of my linux servers as a gateway. The problem is I need to limit bandwidth per client ip address on this gateway. My partners client ip ranges are not known to me. ...
0
votes
1answer
147 views

apache rate limit best practice

I have the following business scenario: 1. apache http server load balances client request to application servers via ajp 2. all the resource intensive work is done on application servers for each ...
0
votes
1answer
96 views

rate limit apache httpd server

I have an apache server that acts as a load balancer to pass off requests to tomcat application servers. I wish to rate limit the http access by ips, and potentially throttle requests, how can this ...
0
votes
0answers
48 views

Filezilla Throttle File transfer rate not user

Is it possible to throttle the file being transferred rather than a user. We have lots of users using the same username/pw and need to throttle each session. Is that possible?
0
votes
0answers
45 views

How to limit rapid-fire connections to HTTP port with iptables?

I'd like to prevent malicious bots from hitting my Apache server too quickly. A couple issues/problems: I don't fully understand the relationship between --limit and --limit-burst and how they work, ...
9
votes
6answers
16k views

Postfix throttling for outgoing messages

I need Postfix to send outgoing messages (from local PHP) with a certain rate. Say, one message in 120 seconds. Any messages exceeding this rate should be queued (delayed) and delivered later. ...
3
votes
2answers
4k views

How to rate limit outgoing SMTP connections for Postfix

I have a postfix instance running on a VM. The VM provider shuts us down if we exceed a threshold of SMTP connections per minute - something like 10. In a typical day we might send 1000 messages, so ...
3
votes
2answers
2k views

HAProxy stops accepting connections

I've been using HAProxy to loadbalance my appservers for many months without problems. Recently some traffic spikes have lead me to setting the maxconn parameter to rate-limit connections to my ...
0
votes
1answer
78 views

nginx rate limitinf unknown directive

I'm trying to set up a rate limit for bots using my website, but if i add limit_req_zone $binary_remote_addr zone=one:10m rate=1r/s; or anything of the sort to /etc/nginx/nginx.conf in the http ...
3
votes
3answers
1k views

Limit number of requests to a specific set of URLs by IP address

I am working on a site, which is going to allow downloads to users, there will be around 2,000,000 files which can be downloaded. We want to discourage people from crawling and taking all of these ...
1
vote
2answers
416 views

How to prevent nginx throttling conflicting with maintenance mode?

We use the HttpLimitReqModule nginx mondule for rate throttling and have found that it conflicts with our "maintenance mode" because both components are using http status code 503. When throttling is ...
1
vote
1answer
81 views

Relax ssh rate-limit rules for certain ip addresses

We've written some tools to automate common development tasks. One tool, for example, ensures all our git repositories are up-to-date. For this to work, our tool needs to connect to our git server and ...
0
votes
1answer
406 views

Linux Traffic Shaping with “tc”: QoS filter for requests directly on the host not applied?

I'm trying to reduce the interface thoughput to debug my application on slower network speed. I've remembered a tc statement to do this on a interface which was working in the past. I used it on a ...
4
votes
1answer
3k views

Nginx $http_x_forwarded_for not always being set

I've noticed in our access logs that sometimes, the $http_x_forwarded_for variable has not been set, and instead, the correct IP is the one set to $remote_addr. Is it possible to set ...
1
vote
1answer
426 views

nginx 301'ing limit_req rate limited requests instead of error page

I have a bulk search form on apache servers behind nginx. I'd like to protect that location so that the second request in a 10 minute period gets 301'd to a "Would you like to use our API" page ...
-3
votes
1answer
166 views

Google-style “Your network is generating too much traffic” bounce for postfix

I'm being attacked from a botnet and I found out about it because I got this email from mailer-daemon telling me there's no space left on device. The mail.log was filled up with messages like Dec 5 ...