Questions tagged [rate-limiting]
In computer networks, rate limiting is used to control the rate of traffic sent or received on a network interface.
239
questions
-1
votes
0
answers
13
views
Bind9 DNS rate limit or QPS optimization
Hello everyone hope you all fine,
I am working on DNS bind on centOS 7, need to optimize, in our environment currently 30000 to 40000 qps checked by dnstop command, at peak hours DNS start dropped ...
1
vote
1
answer
51
views
traceroute: sometimes routers don't respond and user sees timeouts
I'm an admin of small network and I'm investigating a problem my users complain about. The root of their complaints is traceroute: sometimes routers along the path simply don't respond to traceroute ...
- 11
0
votes
0
answers
22
views
What's The Difference Between Rate-Limiting and Throttling?
I keep hearing the terms used interchangeably, but is there an actual difference?
In this article they mention:
Rate Limiting and Throttling policies are designed to limit API
access, but have ...
- 113
0
votes
0
answers
15
views
Haproxy rate limit monitoring
I’m using rate limiting with my haproxy18 and I’d like to somehow squeeze out metrics from it based on ip addresses, who is close to the limit or how the users are hitting the limits.
This is my ...
- 15
0
votes
0
answers
68
views
Rate limit not working as expected on nginx
I have request rate limit set as:
20 r/m
burst=4 delay=2
My expectation is that 1 request will be handled every 3 seconds. For any bursts, upto 4 requests (beyond the rate [1 per 3 seconds]) will be ...
- 138
0
votes
0
answers
9
views
Requests beyond the rate are added to the zone or to the queue?
http {
#...
limit_req_zone $binary_remote_addr zone=one:10m rate=1r/s;
server {
#...
location /search/ {
limit_req zone=one burst=5;
}
}
}
With ...
- 138
0
votes
0
answers
21
views
What is the difference between 10r/s burst=0 and 1r/s burst=9 nodelay?
What is the difference between:
10r/s and burst=0
1r/s and burst=9 nodelay
1st case has processing size capacity of 10r/s. So it allows 10 requests to happen in parallel per second, 11th concurrent ...
- 138
0
votes
0
answers
30
views
nginx limit_req_zone rate limiting granularity
How should the rate be interpreted in the nginx rate limiting module?
10 r/s means 1 request every 100ms - this means granularity is 100ms; and 2nd request within the 100ms will get rejected.
Does 30 ...
- 138
0
votes
1
answer
174
views
How to limit Nginx to max 50 request per second independent from IP
I'm looking for a way to limit Nginx for location to a number of requests per second independent of the origin IP. From my understanding the rate limiting feature is IP sensitive which cannot be ...
- 553
0
votes
1
answer
16
views
Postfix Rate limiting according to a particular user
So this question is again on the table. I have tried to get my answer from forums documents but I wasn't able to find the desired answer.
So, Here is my question I have created a mail server with ...
- 63
0
votes
1
answer
92
views
Rate Limiting Only the Home Page With NGINX limit_req_zone
I have a Wordpress multisite installation and I have some bots hammering the home pages. I would like to set a rate limit only on the home page(s) of the site(s) but leave the other pages unlimited.
...
- 5
0
votes
0
answers
34
views
HAproxy: per-client queue for rate limiting?
I’d like to put a rate limit on incoming HTTP requests, but without sending 429 errors. Instead, requests beyond the limit should be put into a queue from which they are processed at a speed that ...
- 1
0
votes
0
answers
32
views
Handling DDoS HTTP Attack
I’ve experiencing DDoS attack today and I’ve configured Cloudflare rate limiter, also activated WAF. Cloudflare blocked several hundred thousands request. Unfortunately, my server still experiencing ...
- 1
0
votes
1
answer
97
views
In rsync the "bwlimit" parameter is explicitly ignored, how to fix this
I have rsyncd version 3.1.2 listening on port 873 and I want to limit the bandwidth with which my files are downloaded by a client connecting to me. I added a bwlimit both in the config file:
uid = ...
- 127
0
votes
1
answer
80
views
How to force Linux users to respect max login rate
How does one set a rate-based throttle and/or quota for SSH logins per user on a shared system? For example: limit an SSH login to one time per 10 seconds.
Things I've looked at:
pam throttle and ...
- 622
0
votes
0
answers
94
views
How can I limit download/upload speed for every single user on OpenVPN using TC?
I have an OpenVPN server on CentOS 7 and I want to limit the download/upload speed for every single OpenVPN client to 512 kilo byte per second . From my own researches , I understood that I can ...
- 27
0
votes
0
answers
86
views
Avoid request limit for CDN connections in NGINX server
I need to throttle connections/requests in NGINX server for both http and http2 requests. However, the throttling must not be applied to CDN specific IP addresses (which is already populated in geo ...
- 1
0
votes
1
answer
96
views
Possible to create an AWS API Gateway to Route all requests to Classic Load Balancer?
I have a questions (hopefully not dumb). I am the IT guy of a business hosting various applications with AWS and we currently have a Classic Load Balancer sitting in front of 2 to 3 EC2 instances ...
- 117
1
vote
1
answer
30
views
Logging nginx rate-limited IPs into a specific file
I'm looking for an approach to synchronize rate-limited IPs between nginx nodes.
I want to log these IPs and after that pushing them into a database and developing an agent to update blocked IPs in ...
1
vote
0
answers
37
views
named rate limiting - DDOS prevention
I'm wanting to implement some rate-limiting onto our named servers and am looking for some help on making sure the values are "sane". This is what I'm thinking...
rate-limit { errors-per-...
- 111
1
vote
1
answer
42
views
Ratelimit IPs for UDP traffic in ipset list before being sent over GRE tunnel
I am using nat DNAT to forward traffic on a certain port to another Centos server over a GRE tunnel however I want to rate limit a bunch of datacenter IPs I have in a ipset list 'blacklist'. So that ...
- 21
0
votes
1
answer
45
views
Why do some elements of the joomla site not load after setting limit_req?
I have an Nginx reverse proxy that forwards http and https requests to contianers from a Docker server. Recently, I set up a DoS / DDoS protection on the proxy so that the docker server resources don'...
- 17
0
votes
0
answers
39
views
Request header read timeout, DOS attack?
I have a –draft– server with Debian 10, Apache 2.4.38 and a few –rather empty– VHosts with GnuTLS. No proxy nor Nginx.
Every now and then, I get zillions of “AH01382: Request header read timeout” all ...
- 58
0
votes
0
answers
59
views
HAproxy "rate-limit sessions" to below 1 per second
As the title describes, I have a haproxy frontend with a rate-limit of 1 session per second and it's still too many.
Is it possible to use like 1 session every 10 seconds (with 0.1) or the like with ...
- 1
1
vote
0
answers
185
views
How to Implement Rate Limiting in Azure Web Application Firewall(WAF)?
I am looking to implement global rate limiting to Azure WAF. I have created custom rate limiting rules but they are IP based. I know Azure DDoS protection provides a certain coverage limit. But my ...
0
votes
0
answers
40
views
Differentiate and limit nginx bandwith for download connections, website content
Is it possible (without additional tools or the addition of another distribution system) to limit the bandwith of overall download connections (upload to peers that requested to download a file) so ...
- 11
0
votes
0
answers
102
views
How to limit incoming UDP SIP INVITE packets with firewalld?
My System Info:
CentOS Linux release 7.9.2009 (Core)
firewall-cmd v0.6.3
iptables v1.4.21
Kernel 3.10.0-1160.25.1.el7.x86_64
It is running Asterisk v18.4.0 PBX with PJSIP. My carier send too much SIP ...
- 131
0
votes
0
answers
80
views
nGinx Rate Limit Double-Check
So... I have a need where I need to rate limit bots, and specific IP addresses. I am wondering if this is what I need to do before implementing in a live production environment...
map $...
- 133
1
vote
1
answer
311
views
Rate limiting in postfix
So i have been trying to make a mail servddder which is functioning fine now what i want now is i want to limit the amount of mail a mail user can send I have tried and failed with policyd I also ...
- 63
1
vote
0
answers
51
views
How can I limit incoming/outgoing connection speeds based off IPs?
I want to limit the speed each IP can download/upload files for every application on my server to 1Mb/s
Example IP 192.168.0.1 is downloading at sustained 900Kb/s through FTP server if the IP then ...
- 175
0
votes
1
answer
95
views
`iptables` rate limiting & blocking IP addresses based on total download size?
I have a webserver which serves either tiny, or very large files. I want to rate limit IPs by bandwidth. i.e. you can download X GB per day, and then you get blocked for Y hours.
Is it possible in ...
- 29.9k
2
votes
1
answer
246
views
Nginx rate limiting on unique IPs
we've been dealing with constant attacks on our authentication url, we're talking millions of requests per day, my guess is they are trying to brute force passwords.
Whenever we would block the IP ...
- 222
2
votes
2
answers
75
views
Is there is a way to limit access per hour per user in apache2?
When requesting, POST form with userID is already required, so if I can log the userID of the POST form, I think there would be a way to limit to n times(I think 3 time per hour is good for me) of ...
- 21
1
vote
1
answer
788
views
Stop Ubiquiti ICMP restrictions (two concurrent pings at once from same host for traceroute)
How do I change the Ubiquiti Security Gateway's default icmp restrictions from inside the LAN?
It seems that my Ubiquiti Security Gateway's default settings will drop icmp packets if I'm doing more ...
- 465
1
vote
0
answers
294
views
Is it possible to tell nginx to delay a response from a reverse proxied server?
I have an application server sitting behind nginx, and in some cases (e.g. wrong password), I want to intentionally delay the response by 500ms or more.
Implementing this delay in the application ...
- 207
3
votes
1
answer
558
views
Can I use rate-limiting with HTTP basic authentication in Apache?
So I'm running a few popular web applications on my server. I want these to be reachable from any computer without creating too many vulnerabilities.
I am using Apache 2.4.29 as my HTTP server. My ...
- 33
0
votes
1
answer
1k
views
Exchange (2016) many mailbox delegations and throttling policies
At a customers site with 20+ employees per team I get an outlook warning message roughly translated to "The amount of elements opened at once has been limited by the server administrator".
...
- 41
3
votes
1
answer
5k
views
How do I limit linux CPU and RAM usage per user
I would like to limit CPU and ram usage per user.
So, let's say there is user john.
He can run as many processes as he wants, but he also needs to have 2048 megabytes of ram and 2 CPU cores.
I know ...
0
votes
0
answers
599
views
Nginx responding with 429s but I don't have it configured in my config
I'm hosting a rails app on AWS elastic beanstalk and am noticing my nginx server returning 429s in the nginx log. The problem is, I'm not seeing where the limit_req is being defined so I'm struggling ...
- 1
2
votes
1
answer
1k
views
Exclude location from NGINX rate limiting
I have both limit_req_zone and limit_req defined in the http block of nginx so it will apply to all server and location blocks.
Is there a way to exclude a certain location or server block from that ...
0
votes
1
answer
379
views
Linux HTB: More than 70% of ceil rate is never achieved
Background:-
I have an arm based system, which has HTB setup on the eth and wlan interface.
Here is the HTB configuration:-
tc class add dev eth1 parent 1:1 classid 1:1 htb rate 1Gbit ceil 1Gbit ...
0
votes
1
answer
222
views
Postfix limit connections
I have a question about Postfix. Last night someone tried to access my Postfix server, he/she connected like ~30 times to it. Is there any way to limit simultaneous connections?
Here is a part of the ...
0
votes
0
answers
386
views
HAProxy Rate limiting per IP with queuing
I'm moving towards HA using it to replace also NGINX and I've a question regarding how to do a Rate Limiting in HA that enables queuing the request instead of closing them.
I was able to limit per IP ...
- 225
2
votes
0
answers
91
views
Flush old entries from nftable meter list
I use nftables to do rate limiting:
chain input: {
type filter hook input priority 0; policy accept;
tcp dport http ct state new jump rate-limit
}
chain rate-limit {
meter httplimit4 { ...
- 21
2
votes
1
answer
654
views
getting flooded with HEAD requests
Our server got flooded with HEAD requests.
This resulted in a spike in tcp connections that made the server unable to connect to its mysql databases.
We make extensive use of the nginx ratelimiting, ...
- 163
4
votes
0
answers
1k
views
Nginx: Rate limit failed basic auth attempts
Given a simple HTTP Basic Auth setup in Nginx (1.14.1 at time of writing) like this:
server {
...
location / {
auth basic "HTTP Auth Required";
auth basic user file "/path/to/htpasswd";
...
- 401
0
votes
1
answer
313
views
How to do IP address rate limiting in docker?
I have a docker webapp running, port mapped to a machine-running nginx server, and fail2ban to do rate limiting.
Unfortunately, when viewing netstat, docker looks like its using all internal IPs (...
- 101
1
vote
1
answer
94
views
Writes throttled to 500KB/s?
My laptop, running Debian testing, has recently been terribly sluggish at operations involving writing to the disk.
I have no idea where the problem comes from and would love some help tracking this ...
- 133
0
votes
1
answer
736
views
Rate limiting HAProxy connections from clients behind another proxy or NAT
We have HAProxy running on our pfSense hardware, forwarding a single frontend to a number of backend services (using cookies). Everything is working great.
We'd like to add basic "rate limiting" to ...
- 1,127
0
votes
1
answer
279
views
Unable to limit network bandwidth using trickle
I have a server for which I want to start doing some daily backups of certain files. Since server is in production, it is better to limit network bandwidth, I thought trickle would do the job, but it ...
- 164