Questions tagged [rate-limiting]
In computer networks, rate limiting is used to control the rate of traffic sent or received on a network interface.
220
questions
0
votes
1answer
28 views
tc - what is wrong with this comand?
I am new to tc and this might be beginner's mistake, but I know little enough for this to stop me.
I need to write a script which limits incoming/outgoing traffic speed for a docker container.
I began ...
-1
votes
0answers
8 views
Default entry for exim ratelimit nwildlsearch file
I want a file to control the ratelimit of messages sent from my exim4 server.
This is the acl:
deny authenticated = *
set acl_c_msg_limit=${lookup{$authenticated_id}nwildlsearch{/etc/exim4/...
-1
votes
0answers
6 views
Live check the Exim4 sender ratelimit
Is it possibile to verify the current ratelimit usage of an exim4 server?
I have some limit by sender configured, and I want to check if it is far or near the limit.
1
vote
1answer
39 views
Rate limiting in postfix
So i have been trying to make a mail servddder which is functioning fine now what i want now is i want to limit the amount of mail a mail user can send I have tried and failed with policyd I also ...
1
vote
0answers
33 views
How can I limit incoming/outgoing connection speeds based off IPs?
I want to limit the speed each IP can download/upload files for every application on my server to 1Mb/s
Example IP 192.168.0.1 is downloading at sustained 900Kb/s through FTP server if the IP then ...
0
votes
1answer
35 views
`iptables` rate limiting & blocking IP addresses based on total download size?
I have a webserver which serves either tiny, or very large files. I want to rate limit IPs by bandwidth. i.e. you can download X GB per day, and then you get blocked for Y hours.
Is it possible in ...
2
votes
1answer
39 views
Nginx rate limiting on unique IPs
we've been dealing with constant attacks on our authentication url, we're talking millions of requests per day, my guess is they are trying to brute force passwords.
Whenever we would block the IP ...
2
votes
2answers
30 views
Is there is a way to limit access per hour per user in apache2?
When requesting, POST form with userID is already required, so if I can log the userID of the POST form, I think there would be a way to limit to n times(I think 3 time per hour is good for me) of ...
1
vote
1answer
115 views
Stop Ubiquiti ICMP restrictions (two concurrent pings at once from same host for traceroute)
How do I change the Ubiquiti Security Gateway's default icmp restrictions from inside the LAN?
It seems that my Ubiquiti Security Gateway's default settings will drop icmp packets if I'm doing more ...
1
vote
0answers
42 views
Is it possible to tell nginx to delay a response from a reverse proxied server?
I have an application server sitting behind nginx, and in some cases (e.g. wrong password), I want to intentionally delay the response by 500ms or more.
Implementing this delay in the application ...
3
votes
1answer
198 views
Can I use rate-limiting with HTTP basic authentication in Apache?
So I'm running a few popular web applications on my server. I want these to be reachable from any computer without creating too many vulnerabilities.
I am using Apache 2.4.29 as my HTTP server. My ...
0
votes
0answers
19 views
What are sane values for Nginx Rate Limiting?
I'm trying to limit the number of concurrent connections to my site using Nginx limit_req. My goal is to defend the website against some users with a heavy hand on HTTRack, some aggressive bots and a ...
0
votes
1answer
252 views
Exchange (2016) many mailbox delegations and throttling policies
At a customers site with 20+ employees per team I get an outlook warning message roughly translated to "The amount of elements opened at once has been limited by the server administrator".
...
1
vote
1answer
1k views
How do I limit linux CPU and RAM usage per user
I would like to limit CPU and ram usage per user.
So, let's say there is user john.
He can run as many processes as he wants, but he also needs to have 2048 megabytes of ram and 2 CPU cores.
I know ...
0
votes
0answers
173 views
Nginx responding with 429s but I don't have it configured in my config
I'm hosting a rails app on AWS elastic beanstalk and am noticing my nginx server returning 429s in the nginx log. The problem is, I'm not seeing where the limit_req is being defined so I'm struggling ...
0
votes
0answers
170 views
Value for haproxy.router.openshift.io/rate-limit-connections.rate-http annotation
What should be the value for haproxy.router.openshift.io/rate-limit-connections.rate-http annotation in an Openshift Route?
Ref: https://docs.openshift.com/container-platform/4.3/networking/routes/...
0
votes
0answers
51 views
HAProxy ratelimit with delay
Is there a way to set a limit per minute (e.g. 150 r/m) and not just have a maximum threshold of connection after which connections are blocked?
I've investigated a bit and I can't find anything. I've ...
2
votes
1answer
323 views
Exclude location from NGINX rate limiting
I have both limit_req_zone and limit_req defined in the http block of nginx so it will apply to all server and location blocks.
Is there a way to exclude a certain location or server block from that ...
0
votes
0answers
40 views
HAPROXY sc_get_gpc0 acl not working for extended block period
I have been struggling to get this rate-limiting configuration to work on HAProxy. As seen below I am attempting to use "sc2_get_gpc0" to get a second value stored in the hour_hold stick ...
0
votes
1answer
150 views
Linux HTB: More than 70% of ceil rate is never achieved
Background:-
I have an arm based system, which has HTB setup on the eth and wlan interface.
Here is the HTB configuration:-
tc class add dev eth1 parent 1:1 classid 1:1 htb rate 1Gbit ceil 1Gbit ...
0
votes
1answer
56 views
Postfix limit connections
I have a question about Postfix. Last night someone tried to access my Postfix server, he/she connected like ~30 times to it. Is there any way to limit simultaneous connections?
Here is a part of the ...
0
votes
0answers
102 views
HAProxy Rate limiting per IP with queuing
I'm moving towards HA using it to replace also NGINX and I've a question regarding how to do a Rate Limiting in HA that enables queuing the request instead of closing them.
I was able to limit per IP ...
0
votes
0answers
68 views
nginx shared memory space on docker swarm for rate limiting
I have a docker swarm setup across multiple nodes (6 to be exact) that has 3 containers running nginx. I want to rate limit my authentication endpoint using the nginx built in limit_req_zone ...
0
votes
0answers
17 views
Haproxy limit specific endpoint during long calculations
I have heard about haproxy few days ago, so please, forgive my lack of experience. I have got API with two endpoints /fibb and /hello. Calculation of fibb takes 15 seconds, calculation for hello is 0....
2
votes
0answers
53 views
Flush old entries from nftable meter list
I use nftables to do rate limiting:
chain input: {
type filter hook input priority 0; policy accept;
tcp dport http ct state new jump rate-limit
}
chain rate-limit {
meter httplimit4 { ...
1
vote
1answer
226 views
getting flooded with HEAD requests
Our server got flooded with HEAD requests.
This resulted in a spike in tcp connections that made the server unable to connect to its mysql databases.
We make extensive use of the nginx ratelimiting, ...
2
votes
0answers
690 views
Nginx: Rate limit failed basic auth attempts
Given a simple HTTP Basic Auth setup in Nginx (1.14.1 at time of writing) like this:
server {
...
location / {
auth basic "HTTP Auth Required";
auth basic user file "/path/to/htpasswd";
...
0
votes
1answer
217 views
How to do IP address rate limiting in docker?
I have a docker webapp running, port mapped to a machine-running nginx server, and fail2ban to do rate limiting.
Unfortunately, when viewing netstat, docker looks like its using all internal IPs (...
1
vote
1answer
80 views
Writes throttled to 500KB/s?
My laptop, running Debian testing, has recently been terribly sluggish at operations involving writing to the disk.
I have no idea where the problem comes from and would love some help tracking this ...
0
votes
1answer
400 views
Rate limiting HAProxy connections from clients behind another proxy or NAT
We have HAProxy running on our pfSense hardware, forwarding a single frontend to a number of backend services (using cookies). Everything is working great.
We'd like to add basic "rate limiting" to ...
0
votes
1answer
148 views
Unable to limit network bandwidth using trickle
I have a server for which I want to start doing some daily backups of certain files. Since server is in production, it is better to limit network bandwidth, I thought trickle would do the job, but it ...
0
votes
1answer
226 views
When nginx reports about limiting requests, what do theese numbers mean?
When you setup nginx with limit_req directive, it logs excessive requests like
2019/10/30 17:41:36 [error] 10775#10775: *195997 limiting requests, excess: 10.210 by zone "zone_name" ...
I wonder, ...
1
vote
1answer
157 views
Haproxy Block if http_req_rate(60s) > 20 for 3 times?
This is sample configuration,
frontend fe_app
bind 0.0.0.0:8484 name http
acl has_auth_header req.fhdr(api-key) -m found
acl mark_as_abuser sc0_inc_gpc0(be_429_table_api) gt 10
...
0
votes
1answer
96 views
Using trickle/trickled to limit bandwidth throughput of iperf3
I'm doing some throughput testing on some radio units that have narrow channel bandwidth settings (for example sub 250KHz bandwidth). During my testing of iperf3, I noticed that the slowest speed it ...
0
votes
1answer
118 views
ipset iptables drop all exclude ports but via rate limit
I have simple ipset map to track suspicious ips.
These my commands:
ipset flush
ipset -q destroy banlists
ipset create banlists hash:ip comment family inet hashsize 2048 maxelem 1048576 timeout 300
...
0
votes
0answers
253 views
Nginx, limiting request per second for uwsgi application
How to set/estimate proper value for nginx's "limit_req_zone" and "limit_req"?
I have nginx as reverse-proxy for Django app. During loading for example admin panel (where Django request a lot of css/...
4
votes
2answers
1k views
Throttle outgoing mail by domain in exim
I am using exim to deliver mail generated by a web app. The gmx.net, gmx.de and web.de domains are asking me to throttle the amount of mail I send but I have trouble in getting that configured in ...
2
votes
0answers
410 views
pfSense: config with daloRadius (freeRadius) to setup download quota limitation
I have pfsense and daloRadius(running freeRadius inside) up and running, I successfully configured radius parameters on pfSense and the NAS on daloRadius and they can talk to each other.
I am able to ...
0
votes
1answer
316 views
Different limit_req for $request_uri part
I want configure different rate limiting for php-fpm.
I want to:
static files had no limits,
PHP requests had limits,
PHP requests to / admin /.+ had different limits.
I have problem with ...
0
votes
1answer
103 views
Several short consecutive SSH connections
Imagine performing a short repetitive process, which ends by doing a short lived SSH connection to some server (e.g. transferring a newly generated file via SFTP). This means that there will be a lot ...
0
votes
0answers
78 views
Understanding nginx rate limiting
I'm trying to configure rate limiting using nginx's limit_req feature to achieve a specific use case; I've been testing different options within my nginx configuration file, however, I can't seem to ...
2
votes
1answer
1k views
Nginx rate limiting, using multiple rate rules
Using nginx rate limiting, using this rule as an example:
limit_req_zone $request_limiting_zone_key zone=request_limiting_search:20m rate=30r/m;
This will set 30 requests per minute. However what ...
1
vote
1answer
1k views
HaProxy 1.8 - Stick tables and passing on haproxy calculated rates as request headers to the backends
I have read this article about stick tables: https://www.haproxy.com/blog/introduction-to-haproxy-stick-tables/
I would like to add rate limiting to my haproxy config. But before I want to add a hard ...
0
votes
0answers
120 views
NGINX - Dynamic throttling of bandwidth
I am going to deploy a website with several big media files (~10 GiB) and I would like to balance the load on it.
NGINX will be used to serve the files. What I would like to achieve is something that ...
1
vote
1answer
5k views
Rate Limit using Azure Application Gateway
I am changing the deployment of our Web App from Azure App Service to VMs behind an Application Gateway, because the App Service could not handle the peak load we had a few days ago.
What I now ...
0
votes
0answers
77 views
limit_req_zone for the whole PHP
I'm protecting wp-login.php via below rule:
location = /wp-login.php {
limit_req zone=one burst=1 nodelay;
include fastcgi_params;
fastcgi_pass unix:/var/run/php/php7.2-fpm.sock;
}
My ...
0
votes
1answer
1k views
How to configure Nginx to only rate limit the API and not static files?
Because limit_req_zone must be specified in HTTP context and cannot be in server or even in location context, it seems one can only set a rate limit for the entire server.
Nginx is used to serve ...
2
votes
1answer
827 views
BIND DNS rate-limit: qps-scale understanding
I have a few questions concerning qps-scale and how it is used when rate-limit option is used in BIND.
Referencing: http://www.zytrax.com/books/dns/ch7/hkpng.html#rate-limit and
https://ftp.isc.org/...
-1
votes
1answer
118 views
Ban IP addresses based on bandwidth usage on apache/linux
Is it possible to throttle or ban IP address based on how much the host is using bandwidth of my webserver? In ideal situation I would like to create rules like:
if IP uses bandwidth over 1000 MB ...
1
vote
0answers
110 views
Configure postfix to send emails per domain from each virtual server
In my setup I have installed virtualmin for virtual servers. I have following virtual servers with their own dedicated ip address. Postfix is configured as per this method to use dedicated ip for each ...
