Questions tagged [rate-limiting]
In computer networks, rate limiting is used to control the rate of traffic sent or received on a network interface.
209
questions
0
votes
1answer
13 views
Postfix limit connections
I have a question about Postfix. Last night someone tried to access my Postfix server, he/she connected like ~30 times to it. Is there any way to limit simultaneous connections?
Here is a part of the ...
0
votes
0answers
9 views
HAProxy Rate limiting per IP with queuing
I'm moving towards HA using it to replace also NGINX and I've a question regarding how to do a Rate Limiting in HA that enables queuing the request instead of closing them.
I was able to limit per IP ...
0
votes
0answers
27 views
nginx shared memory space on docker swarm for rate limiting
I have a docker swarm setup across multiple nodes (6 to be exact) that has 3 containers running nginx. I want to rate limit my authentication endpoint using the nginx built in limit_req_zone ...
0
votes
0answers
15 views
Haproxy limit specific endpoint during long calculations
I have heard about haproxy few days ago, so please, forgive my lack of experience. I have got API with two endpoints /fibb and /hello. Calculation of fibb takes 15 seconds, calculation for hello is 0....
0
votes
0answers
16 views
Prevent VNC “Too many authentication failures” error with nginx rate-limiting?
Is it possible to use Nginx rate-limiting feature to prevent "Too many authentication failures" error with TurboVNC (or another VNC server)?
I use TurboVNC (with the VNC password authentification ...
1
vote
0answers
20 views
Flush old entries from nftable meter list
I use nftables to do rate limiting:
chain input: {
type filter hook input priority 0; policy accept;
tcp dport http ct state new jump rate-limit
}
chain rate-limit {
meter httplimit4 { ...
0
votes
0answers
9 views
IPtables rate limit with stricter limits in long run
I want to do source IP-based rate limiting with multiple stages. My exact desired values are
Up to 1 connection per second with burst
Up to 6 connections per minute (or 1 per 10 seconds) with burst
...
1
vote
1answer
55 views
getting flooded with HEAD requests
Our server got flooded with HEAD requests.
This resulted in a spike in tcp connections that made the server unable to connect to its mysql databases.
We make extensive use of the nginx ratelimiting, ...
0
votes
0answers
15 views
Synology NAS slow because of denied accesses for system user - rate limiting?
My customer is copying files from a Windows 10 machine to a Synology NAS (don't know which one). When doing so, an anti-malware program running on the Windows 10 machine tries to open the newly-copied ...
0
votes
0answers
141 views
Nginx: Rate limit failed basic auth attempts
Given a simple HTTP Basic Auth setup in Nginx (1.14.1 at time of writing) like this:
server {
...
location / {
auth basic "HTTP Auth Required";
auth basic user file "/path/to/htpasswd";
...
0
votes
0answers
68 views
UFW ratelimiting reset time once tripped
I'm a newbie at server administration, and think I might have screwed up.
I have a debian webserver that doubles as a backup and is set up with UFW to limit FTP and SSH connections.
I had an ...
0
votes
0answers
58 views
Limit outgoing tcp syn packets
I want to ratelimit outgoing TCP SYN packets to prevent syn floods from local vps customers.
Since the vpses use the macvtap driver I cannot use iptables. I have been looking into tc which works but ...
0
votes
1answer
127 views
How to do IP address rate limiting in docker?
I have a docker webapp running, port mapped to a machine-running nginx server, and fail2ban to do rate limiting.
Unfortunately, when viewing netstat, docker looks like its using all internal IPs (...
1
vote
0answers
61 views
Writes throttled to 500KB/s?
My laptop, running Debian testing, has recently been terribly sluggish at operations involving writing to the disk.
I have no idea where the problem comes from and would love some help tracking this ...
0
votes
0answers
35 views
Nginx rate limiter doesn't work for the 301 response - is there any security/attack risk?
I've learned that if I have a http/https permanent redirect rule (return 301 on http and point to https), the rate limiter does not apply when querying the http server.
The reason is that the rewrite ...
0
votes
0answers
70 views
Limiting NGINX download speed bursts 4096 bytes at a time
I am trying to limit the download speed of a static file served over Nginx to an absurdly slow 13 bytes per second. I found that limit_rate could do this, so I used it together with limit_conn to make ...
0
votes
1answer
121 views
Rate limiting HAProxy connections from clients behind another proxy or NAT
We have HAProxy running on our pfSense hardware, forwarding a single frontend to a number of backend services (using cookies). Everything is working great.
We'd like to add basic "rate limiting" to ...
0
votes
1answer
93 views
Unable to limit network bandwidth using trickle
I have a server for which I want to start doing some daily backups of certain files. Since server is in production, it is better to limit network bandwidth, I thought trickle would do the job, but it ...
0
votes
1answer
30 views
When nginx reports about limiting requests, what do theese numbers mean?
When you setup nginx with limit_req directive, it logs excessive requests like
2019/10/30 17:41:36 [error] 10775#10775: *195997 limiting requests, excess: 10.210 by zone "zone_name" ...
I wonder, ...
1
vote
1answer
68 views
Haproxy Block if http_req_rate(60s) > 20 for 3 times?
This is sample configuration,
frontend fe_app
bind 0.0.0.0:8484 name http
acl has_auth_header req.fhdr(api-key) -m found
acl mark_as_abuser sc0_inc_gpc0(be_429_table_api) gt 10
...
0
votes
1answer
57 views
Using trickle/trickled to limit bandwidth throughput of iperf3
I'm doing some throughput testing on some radio units that have narrow channel bandwidth settings (for example sub 250KHz bandwidth). During my testing of iperf3, I noticed that the slowest speed it ...
0
votes
1answer
52 views
ipset iptables drop all exclude ports but via rate limit
I have simple ipset map to track suspicious ips.
These my commands:
ipset flush
ipset -q destroy banlists
ipset create banlists hash:ip comment family inet hashsize 2048 maxelem 1048576 timeout 300
...
0
votes
0answers
121 views
Nginx, limiting request per second for uwsgi application
How to set/estimate proper value for nginx's "limit_req_zone" and "limit_req"?
I have nginx as reverse-proxy for Django app. During loading for example admin panel (where Django request a lot of css/...
0
votes
0answers
53 views
HAProxy key based rate limit questions
We want to achieve key based rate limiting. For example, let’s say if queries per minute is > 300 for 2m for 5 times then use http tarpit. Note we do not want to block the offender first time but if ...
2
votes
1answer
370 views
Throttle outgoing mail by domain in exim
I am using exim to deliver mail generated by a web app. The gmx.net, gmx.de and web.de domains are asking me to throttle the amount of mail I send but I have trouble in getting that configured in ...
2
votes
0answers
183 views
pfSense: config with daloRadius (freeRadius) to setup download quota limitation
I have pfsense and daloRadius(running freeRadius inside) up and running, I successfully configured radius parameters on pfSense and the NAS on daloRadius and they can talk to each other.
I am able to ...
0
votes
1answer
141 views
Different limit_req for $request_uri part
I want configure different rate limiting for php-fpm.
I want to:
static files had no limits,
PHP requests had limits,
PHP requests to / admin /.+ had different limits.
I have problem with ...
0
votes
1answer
64 views
Several short consecutive SSH connections
Imagine performing a short repetitive process, which ends by doing a short lived SSH connection to some server (e.g. transferring a newly generated file via SFTP). This means that there will be a lot ...
0
votes
0answers
49 views
Understanding nginx rate limiting
I'm trying to configure rate limiting using nginx's limit_req feature to achieve a specific use case; I've been testing different options within my nginx configuration file, however, I can't seem to ...
1
vote
1answer
486 views
Nginx rate limiting, using multiple rate rules
Using nginx rate limiting, using this rule as an example:
limit_req_zone $request_limiting_zone_key zone=request_limiting_search:20m rate=30r/m;
This will set 30 requests per minute. However what ...
0
votes
0answers
17 views
Is there rate limiting on connection attempts to a Firebird 2.5 database?
I've noticed that, when attempting to repeatedly open a connection with the wrong password, I can make 3 attempts very quickly and then the 4th takes a few seconds. When doing many attempts, it seems ...
1
vote
1answer
496 views
HaProxy 1.8 - Stick tables and passing on haproxy calculated rates as request headers to the backends
I have read this article about stick tables: https://www.haproxy.com/blog/introduction-to-haproxy-stick-tables/
I would like to add rate limiting to my haproxy config. But before I want to add a hard ...
0
votes
0answers
80 views
NGINX - Dynamic throttling of bandwidth
I am going to deploy a website with several big media files (~10 GiB) and I would like to balance the load on it.
NGINX will be used to serve the files. What I would like to achieve is something that ...
1
vote
1answer
3k views
Rate Limit using Azure Application Gateway
I am changing the deployment of our Web App from Azure App Service to VMs behind an Application Gateway, because the App Service could not handle the peak load we had a few days ago.
What I now ...
0
votes
0answers
69 views
limit_req_zone for the whole PHP
I'm protecting wp-login.php via below rule:
location = /wp-login.php {
limit_req zone=one burst=1 nodelay;
include fastcgi_params;
fastcgi_pass unix:/var/run/php/php7.2-fpm.sock;
}
My ...
0
votes
1answer
559 views
How to configure Nginx to only rate limit the API and not static files?
Because limit_req_zone must be specified in HTTP context and cannot be in server or even in location context, it seems one can only set a rate limit for the entire server.
Nginx is used to serve ...
2
votes
1answer
455 views
BIND DNS rate-limit: qps-scale understanding
I have a few questions concerning qps-scale and how it is used when rate-limit option is used in BIND.
Referencing: http://www.zytrax.com/books/dns/ch7/hkpng.html#rate-limit and
https://ftp.isc.org/...
-1
votes
1answer
94 views
Ban IP addresses based on bandwidth usage on apache/linux
Is it possible to throttle or ban IP address based on how much the host is using bandwidth of my webserver? In ideal situation I would like to create rules like:
if IP uses bandwidth over 1000 MB ...
1
vote
0answers
90 views
Configure postfix to send emails per domain from each virtual server
In my setup I have installed virtualmin for virtual servers. I have following virtual servers with their own dedicated ip address. Postfix is configured as per this method to use dedicated ip for each ...
1
vote
1answer
426 views
Nginx rate limiting - only slowdown if ceiling hit
We recently switched to nginx and I was happy to see that rate limiting seems easy enough there. I set up the following limit for a particular zone:
limit_req_zone $binary_remote_addr zone=...
0
votes
0answers
21 views
Block web site downloading programs like HTTrack
I have a lot of big downloads on my web site, so if somebody tries to download my whole site using automated software like HTTrack, it causes a heavy load on my server. Is there a way to block ...
1
vote
0answers
49 views
How to limit destination IPs for nginx cache proxy
I'm trying to set up nginx as a cache proxy that can cache/serve pages only from one IP range (example: 31.29.100.0/24).
To set up the proxy I use this conf:
server {
listen 8080;
location / ...
0
votes
1answer
218 views
How to protect a web application from IPv6 bots?
I'm interested in this in the context of protecting a web application from bots, but I guess it applies to all kind of attacks that can be done over IPv6 by bots.
In a web application, you have some ...
0
votes
1answer
267 views
Windows AD. Is there a limit of successful authentications requests per given account?
We're running bulk automation scripts in our environment. Hundreds of threads simultaneously that use the same AD account for authentication. At some point we got this account locked out while no ...
3
votes
0answers
346 views
Any experience with Nginx Rate limiting in HTTPS scenario?
Does anyone have experience with rate limiting on Nginx HTTPS server listening on port 443? As per my testing, rate limiting seems to work well with Nginx listening on port 80 but I don't get expected ...
2
votes
1answer
726 views
Nginx: Limit request based on response status code
I'm trying to limit requests with nginx based on response status code. I'd like to slow down requests with too many 4xx or 5xx responses. I have this code block in my config file:
map $status $...
1
vote
0answers
82 views
Outbound rate limiting (with a buffer) per IP
My software has to interact via HTTP requests with several third party services, and these service enforce a rate limiter policy on their side. If I go above the rate limit, my server which is running ...
0
votes
0answers
234 views
Postfix email throttling for deferred queue
I have an issue with email sending speeds on postfix. the email to yahoo are getting throttled and getting suspended temporarily. I edited the main.cf configuration to slower down the speeds and add a ...
0
votes
1answer
1k views
Specify all php files in Nginx config in order to make said php app more safe (nginx)
I got an idea for to write a simple script to create an Nginx config file based on a set of files that would be allowed to be run. In my case they would be .php files from an application. The script ...
0
votes
1answer
151 views
How can throttle users but whitelist robot access to my web site?
I am looking at using mod_evasive and/or mod_throttle to prevent abusive access to my web site (running Apache 2.4). By "abusive", I mean using wget or HTTtrack to download the whole web site, for ...
