Questions tagged [rate-limiting]

In computer networks, rate limiting is used to control the rate of traffic sent or received on a network interface.

Traffic that is less than or equal to the specified rate is sent, whereas traffic that exceeds the rate is dropped or delayed. Rate limiting is performed by policing (discarding excess packets), queuing (delaying packets in transit) or congestion control (manipulating the protocol’s congestion mechanism). Policing and queuing can be applied to any network protocol. Congestion control can only be applied to protocols with congestion control mechanisms, such as the transmission control protocol (TCP).

244 questions
1
vote
0 answers

What's The Difference Between Rate-Limiting and Throttling?

I keep hearing the terms used interchangeably, but is there an actual difference? In this article they mention: Rate Limiting and Throttling policies are designed to limit API access, but have different intentions: Rate limiting protects an API by…
Alex Weitz
  • 133
  • 8
1
vote
1 answer

How to force Linux users to respect max login rate

How does one set a rate-based throttle and/or quota for SSH logins per user on a shared system? For example: limit an SSH login to one time per 10 seconds. Things I've looked at: pam throttle and throttle2, but those look for failed logins and then…
EdwardTeach
  • 632
  • 9
  • 20
1
vote
1 answer

Logging nginx rate-limited IPs into a specific file

I'm looking for an approach to synchronize rate-limited IPs between nginx nodes. I want to log these IPs and after that pushing them into a database and developing an agent to update blocked IPs in nginx config files. My challenge is to find a way…
1
vote
0 answers

named rate limiting - DDOS prevention

I'm wanting to implement some rate-limiting onto our named servers and am looking for some help on making sure the values are "sane". This is what I'm thinking... rate-limit { errors-per-second 2;responses-per-second 15; window 60; }; Even after…
Egyas
  • 151
  • 2
  • 10
1
vote
1 answer

Ratelimit IPs for UDP traffic in ipset list before being sent over GRE tunnel

I am using nat DNAT to forward traffic on a certain port to another Centos server over a GRE tunnel however I want to rate limit a bunch of datacenter IPs I have in a ipset list 'blacklist'. So that the traffic outputted to the tunnel is rate…
Rushy
  • 21
  • 5
1
vote
0 answers

How to Implement Rate Limiting in Azure Web Application Firewall(WAF)?

I am looking to implement global rate limiting to Azure WAF. I have created custom rate limiting rules but they are IP based. I know Azure DDoS protection provides a certain coverage limit. But my goal is to have a maximum limit of HTTP requests…
1
vote
1 answer

Rate limiting in postfix

So i have been trying to make a mail servddder which is functioning fine now what i want now is i want to limit the amount of mail a mail user can send I have tried and failed with policyd I also posted a question for a topic but didnt got any…
sanjib
  • 63
  • 7
1
vote
0 answers

How can I limit incoming/outgoing connection speeds based off IPs?

I want to limit the speed each IP can download/upload files for every application on my server to 1Mb/s Example IP 192.168.0.1 is downloading at sustained 900Kb/s through FTP server if the IP then attempts to download files through our webserver it…
Toodarday
  • 215
  • 1
  • 2
  • 8
1
vote
1 answer

Stop Ubiquiti ICMP restrictions (two concurrent pings at once from same host for traceroute)

How do I change the Ubiquiti Security Gateway's default icmp restrictions from inside the LAN? It seems that my Ubiquiti Security Gateway's default settings will drop icmp packets if I'm doing more than one traceroute at a time, but I can't find any…
Michael Altfield
  • 739
  • 2
  • 8
  • 23
1
vote
0 answers

Is it possible to tell nginx to delay a response from a reverse proxied server?

I have an application server sitting behind nginx, and in some cases (e.g. wrong password), I want to intentionally delay the response by 500ms or more. Implementing this delay in the application server requires a bit of redesign. Is it possible to…
CaptainCodeman
  • 227
  • 2
  • 10
1
vote
0 answers

Nginx responding with 429s but I don't have it configured in my config

I'm hosting a rails app on AWS elastic beanstalk and am noticing my nginx server returning 429s in the nginx log. The problem is, I'm not seeing where the limit_req is being defined so I'm struggling to understand why my nginx would ever return 429.…
0
votes
1 answer

How to do IP address rate limiting in docker?

I have a docker webapp running, port mapped to a machine-running nginx server, and fail2ban to do rate limiting. Unfortunately, when viewing netstat, docker looks like its using all internal IPs (things like localhost:59719), rather than exposing…
dessalines
  • 101
  • 1
0
votes
2 answers

Rate limiting HAProxy connections from clients behind another proxy or NAT

We have HAProxy running on our pfSense hardware, forwarding a single frontend to a number of backend services (using cookies). Everything is working great. We'd like to add basic "rate limiting" to HAProxy. In the Frontend configuration, I've…
KenD
  • 1,147
  • 2
  • 17
  • 37
0
votes
1 answer

Unable to limit network bandwidth using trickle

I have a server for which I want to start doing some daily backups of certain files. Since server is in production, it is better to limit network bandwidth, I thought trickle would do the job, but it does not seem to have any effect at all and I…
alexfvolk
  • 164
  • 2
  • 10
0
votes
1 answer

Using trickle/trickled to limit bandwidth throughput of iperf3

I'm doing some throughput testing on some radio units that have narrow channel bandwidth settings (for example sub 250KHz bandwidth). During my testing of iperf3, I noticed that the slowest speed it would ever transfer at despite setting a bandwidth…