2022 Developer Survey is open! Take survey.

Questions tagged [rate-limiting]

In computer networks, rate limiting is used to control the rate of traffic sent or received on a network interface.

Filter by
Sorted by
Tagged with
-1 votes
0 answers
13 views

Bind9 DNS rate limit or QPS optimization

Hello everyone hope you all fine, I am working on DNS bind on centOS 7, need to optimize, in our environment currently 30000 to 40000 qps checked by dnstop command, at peak hours DNS start dropped ...
user avatar
1 vote
1 answer
51 views

traceroute: sometimes routers don't respond and user sees timeouts

I'm an admin of small network and I'm investigating a problem my users complain about. The root of their complaints is traceroute: sometimes routers along the path simply don't respond to traceroute ...
user avatar
  • 11
0 votes
0 answers
22 views

What's The Difference Between Rate-Limiting and Throttling?

I keep hearing the terms used interchangeably, but is there an actual difference? In this article they mention: Rate Limiting and Throttling policies are designed to limit API access, but have ...
user avatar
0 votes
0 answers
15 views

Haproxy rate limit monitoring

I’m using rate limiting with my haproxy18 and I’d like to somehow squeeze out metrics from it based on ip addresses, who is close to the limit or how the users are hitting the limits. This is my ...
user avatar
  • 15
0 votes
0 answers
68 views

Rate limit not working as expected on nginx

I have request rate limit set as: 20 r/m burst=4 delay=2 My expectation is that 1 request will be handled every 3 seconds. For any bursts, upto 4 requests (beyond the rate [1 per 3 seconds]) will be ...
user avatar
  • 138
0 votes
0 answers
9 views

Requests beyond the rate are added to the zone or to the queue?

http { #... limit_req_zone $binary_remote_addr zone=one:10m rate=1r/s; server { #... location /search/ { limit_req zone=one burst=5; } } } With ...
user avatar
  • 138
0 votes
0 answers
21 views

What is the difference between 10r/s burst=0 and 1r/s burst=9 nodelay?

What is the difference between: 10r/s and burst=0 1r/s and burst=9 nodelay 1st case has processing size capacity of 10r/s. So it allows 10 requests to happen in parallel per second, 11th concurrent ...
user avatar
  • 138
0 votes
0 answers
30 views

nginx limit_req_zone rate limiting granularity

How should the rate be interpreted in the nginx rate limiting module? 10 r/s means 1 request every 100ms - this means granularity is 100ms; and 2nd request within the 100ms will get rejected. Does 30 ...
user avatar
  • 138
0 votes
1 answer
174 views

How to limit Nginx to max 50 request per second independent from IP

I'm looking for a way to limit Nginx for location to a number of requests per second independent of the origin IP. From my understanding the rate limiting feature is IP sensitive which cannot be ...
user avatar
  • 553
0 votes
1 answer
16 views

Postfix Rate limiting according to a particular user

So this question is again on the table. I have tried to get my answer from forums documents but I wasn't able to find the desired answer. So, Here is my question I have created a mail server with ...
user avatar
  • 63
0 votes
1 answer
92 views

Rate Limiting Only the Home Page With NGINX limit_req_zone

I have a Wordpress multisite installation and I have some bots hammering the home pages. I would like to set a rate limit only on the home page(s) of the site(s) but leave the other pages unlimited. ...
user avatar
  • 5
0 votes
0 answers
34 views

HAproxy: per-client queue for rate limiting?

I’d like to put a rate limit on incoming HTTP requests, but without sending 429 errors. Instead, requests beyond the limit should be put into a queue from which they are processed at a speed that ...
user avatar
  • 1
0 votes
0 answers
32 views

Handling DDoS HTTP Attack

I’ve experiencing DDoS attack today and I’ve configured Cloudflare rate limiter, also activated WAF. Cloudflare blocked several hundred thousands request. Unfortunately, my server still experiencing ...
user avatar
  • 1
0 votes
1 answer
97 views

In rsync the "bwlimit" parameter is explicitly ignored, how to fix this

I have rsyncd version 3.1.2 listening on port 873 and I want to limit the bandwidth with which my files are downloaded by a client connecting to me. I added a bwlimit both in the config file: uid = ...
user avatar
  • 127
0 votes
1 answer
80 views

How to force Linux users to respect max login rate

How does one set a rate-based throttle and/or quota for SSH logins per user on a shared system? For example: limit an SSH login to one time per 10 seconds. Things I've looked at: pam throttle and ...
user avatar
0 votes
0 answers
94 views

How can I limit download/upload speed for every single user on OpenVPN using TC?

I have an OpenVPN server on CentOS 7 and I want to limit the download/upload speed for every single OpenVPN client to 512 kilo byte per second . From my own researches , I understood that I can ...
user avatar
0 votes
0 answers
86 views

Avoid request limit for CDN connections in NGINX server

I need to throttle connections/requests in NGINX server for both http and http2 requests. However, the throttling must not be applied to CDN specific IP addresses (which is already populated in geo ...
user avatar
  • 1
0 votes
1 answer
96 views

Possible to create an AWS API Gateway to Route all requests to Classic Load Balancer?

I have a questions (hopefully not dumb). I am the IT guy of a business hosting various applications with AWS and we currently have a Classic Load Balancer sitting in front of 2 to 3 EC2 instances ...
user avatar
  • 117
1 vote
1 answer
30 views

Logging nginx rate-limited IPs into a specific file

I'm looking for an approach to synchronize rate-limited IPs between nginx nodes. I want to log these IPs and after that pushing them into a database and developing an agent to update blocked IPs in ...
user avatar
1 vote
0 answers
37 views

named rate limiting - DDOS prevention

I'm wanting to implement some rate-limiting onto our named servers and am looking for some help on making sure the values are "sane". This is what I'm thinking... rate-limit { errors-per-...
user avatar
  • 111
1 vote
1 answer
42 views

Ratelimit IPs for UDP traffic in ipset list before being sent over GRE tunnel

I am using nat DNAT to forward traffic on a certain port to another Centos server over a GRE tunnel however I want to rate limit a bunch of datacenter IPs I have in a ipset list 'blacklist'. So that ...
user avatar
  • 21
0 votes
1 answer
45 views

Why do some elements of the joomla site not load after setting limit_req?

I have an Nginx reverse proxy that forwards http and https requests to contianers from a Docker server. Recently, I set up a DoS / DDoS protection on the proxy so that the docker server resources don'...
user avatar
  • 17
0 votes
0 answers
39 views

Request header read timeout, DOS attack?

I have a –draft– server with Debian 10, Apache 2.4.38 and a few –rather empty– VHosts with GnuTLS. No proxy nor Nginx. Every now and then, I get zillions of “AH01382: Request header read timeout” all ...
user avatar
0 votes
0 answers
59 views

HAproxy "rate-limit sessions" to below 1 per second

As the title describes, I have a haproxy frontend with a rate-limit of 1 session per second and it's still too many. Is it possible to use like 1 session every 10 seconds (with 0.1) or the like with ...
user avatar
  • 1
1 vote
0 answers
185 views

How to Implement Rate Limiting in Azure Web Application Firewall(WAF)?

I am looking to implement global rate limiting to Azure WAF. I have created custom rate limiting rules but they are IP based. I know Azure DDoS protection provides a certain coverage limit. But my ...
user avatar
0 votes
0 answers
40 views

Differentiate and limit nginx bandwith for download connections, website content

Is it possible (without additional tools or the addition of another distribution system) to limit the bandwith of overall download connections (upload to peers that requested to download a file) so ...
user avatar
  • 11
0 votes
0 answers
102 views

How to limit incoming UDP SIP INVITE packets with firewalld?

My System Info: CentOS Linux release 7.9.2009 (Core) firewall-cmd v0.6.3 iptables v1.4.21 Kernel 3.10.0-1160.25.1.el7.x86_64 It is running Asterisk v18.4.0 PBX with PJSIP. My carier send too much SIP ...
user avatar
0 votes
0 answers
80 views

nGinx Rate Limit Double-Check

So... I have a need where I need to rate limit bots, and specific IP addresses. I am wondering if this is what I need to do before implementing in a live production environment... map $...
user avatar
  • 133
1 vote
1 answer
311 views

Rate limiting in postfix

So i have been trying to make a mail servddder which is functioning fine now what i want now is i want to limit the amount of mail a mail user can send I have tried and failed with policyd I also ...
user avatar
  • 63
1 vote
0 answers
51 views

How can I limit incoming/outgoing connection speeds based off IPs?

I want to limit the speed each IP can download/upload files for every application on my server to 1Mb/s Example IP 192.168.0.1 is downloading at sustained 900Kb/s through FTP server if the IP then ...
user avatar
  • 175
0 votes
1 answer
95 views

`iptables` rate limiting & blocking IP addresses based on total download size?

I have a webserver which serves either tiny, or very large files. I want to rate limit IPs by bandwidth. i.e. you can download X GB per day, and then you get blocked for Y hours. Is it possible in ...
user avatar
  • 29.9k
2 votes
1 answer
246 views

Nginx rate limiting on unique IPs

we've been dealing with constant attacks on our authentication url, we're talking millions of requests per day, my guess is they are trying to brute force passwords. Whenever we would block the IP ...
user avatar
  • 222
2 votes
2 answers
75 views

Is there is a way to limit access per hour per user in apache2?

When requesting, POST form with userID is already required, so if I can log the userID of the POST form, I think there would be a way to limit to n times(I think 3 time per hour is good for me) of ...
user avatar
  • 21
1 vote
1 answer
788 views

Stop Ubiquiti ICMP restrictions (two concurrent pings at once from same host for traceroute)

How do I change the Ubiquiti Security Gateway's default icmp restrictions from inside the LAN? It seems that my Ubiquiti Security Gateway's default settings will drop icmp packets if I'm doing more ...
user avatar
1 vote
0 answers
294 views

Is it possible to tell nginx to delay a response from a reverse proxied server?

I have an application server sitting behind nginx, and in some cases (e.g. wrong password), I want to intentionally delay the response by 500ms or more. Implementing this delay in the application ...
user avatar
3 votes
1 answer
558 views

Can I use rate-limiting with HTTP basic authentication in Apache?

So I'm running a few popular web applications on my server. I want these to be reachable from any computer without creating too many vulnerabilities. I am using Apache 2.4.29 as my HTTP server. My ...
user avatar
  • 33
0 votes
1 answer
1k views

Exchange (2016) many mailbox delegations and throttling policies

At a customers site with 20+ employees per team I get an outlook warning message roughly translated to "The amount of elements opened at once has been limited by the server administrator". ...
user avatar
3 votes
1 answer
5k views

How do I limit linux CPU and RAM usage per user

I would like to limit CPU and ram usage per user. So, let's say there is user john. He can run as many processes as he wants, but he also needs to have 2048 megabytes of ram and 2 CPU cores. I know ...
user avatar
0 votes
0 answers
599 views

Nginx responding with 429s but I don't have it configured in my config

I'm hosting a rails app on AWS elastic beanstalk and am noticing my nginx server returning 429s in the nginx log. The problem is, I'm not seeing where the limit_req is being defined so I'm struggling ...
user avatar
  • 1
2 votes
1 answer
1k views

Exclude location from NGINX rate limiting

I have both limit_req_zone and limit_req defined in the http block of nginx so it will apply to all server and location blocks. Is there a way to exclude a certain location or server block from that ...
user avatar
0 votes
1 answer
379 views

Linux HTB: More than 70% of ceil rate is never achieved

Background:- I have an arm based system, which has HTB setup on the eth and wlan interface. Here is the HTB configuration:- tc class add dev eth1 parent 1:1 classid 1:1 htb rate 1Gbit ceil 1Gbit ...
user avatar
0 votes
1 answer
222 views

Postfix limit connections

I have a question about Postfix. Last night someone tried to access my Postfix server, he/she connected like ~30 times to it. Is there any way to limit simultaneous connections? Here is a part of the ...
user avatar
0 votes
0 answers
386 views

HAProxy Rate limiting per IP with queuing

I'm moving towards HA using it to replace also NGINX and I've a question regarding how to do a Rate Limiting in HA that enables queuing the request instead of closing them. I was able to limit per IP ...
user avatar
  • 225
2 votes
0 answers
91 views

Flush old entries from nftable meter list

I use nftables to do rate limiting: chain input: { type filter hook input priority 0; policy accept; tcp dport http ct state new jump rate-limit } chain rate-limit { meter httplimit4 { ...
user avatar
  • 21
2 votes
1 answer
654 views

getting flooded with HEAD requests

Our server got flooded with HEAD requests. This resulted in a spike in tcp connections that made the server unable to connect to its mysql databases. We make extensive use of the nginx ratelimiting, ...
user avatar
4 votes
0 answers
1k views

Nginx: Rate limit failed basic auth attempts

Given a simple HTTP Basic Auth setup in Nginx (1.14.1 at time of writing) like this: server { ... location / { auth basic "HTTP Auth Required"; auth basic user file "/path/to/htpasswd"; ...
user avatar
  • 401
0 votes
1 answer
313 views

How to do IP address rate limiting in docker?

I have a docker webapp running, port mapped to a machine-running nginx server, and fail2ban to do rate limiting. Unfortunately, when viewing netstat, docker looks like its using all internal IPs (...
user avatar
  • 101
1 vote
1 answer
94 views

Writes throttled to 500KB/s?

My laptop, running Debian testing, has recently been terribly sluggish at operations involving writing to the disk. I have no idea where the problem comes from and would love some help tracking this ...
user avatar
  • 133
0 votes
1 answer
736 views

Rate limiting HAProxy connections from clients behind another proxy or NAT

We have HAProxy running on our pfSense hardware, forwarding a single frontend to a number of backend services (using cookies). Everything is working great. We'd like to add basic "rate limiting" to ...
user avatar
  • 1,127
0 votes
1 answer
279 views

Unable to limit network bandwidth using trickle

I have a server for which I want to start doing some daily backups of certain files. Since server is in production, it is better to limit network bandwidth, I thought trickle would do the job, but it ...
user avatar
  • 164

1
2 3 4 5