Questions tagged [rate-limiting]

In computer networks, rate limiting is used to control the rate of traffic sent or received on a network interface.

Traffic that is less than or equal to the specified rate is sent, whereas traffic that exceeds the rate is dropped or delayed. Rate limiting is performed by policing (discarding excess packets), queuing (delaying packets in transit) or congestion control (manipulating the protocol’s congestion mechanism). Policing and queuing can be applied to any network protocol. Congestion control can only be applied to protocols with congestion control mechanisms, such as the transmission control protocol (TCP).

244 questions
3
votes
2 answers

Postfix limit total sent per hour

I'm not after services that could provide me with fancy fine-grained control like policyd, I don't need per user/domain control, I only want to: limit maximim number of emails that could be sent trough Postfix mail system per hour, preferably but…
Miloš Đakonović
  • 682
  • 3
  • 9
  • 28
3
votes
1 answer

Nginx limit_req_zone ignores rate value

I have a strange behavior my config looks something like this: http { limit_req_zone $binary_remote_addr zone=nocachelimit:10m rate=120r/m; } ... location "/api" { { limit_req zone=nocachelimit burst=20; } } Regardless of what…
gries
  • 173
  • 7
3
votes
2 answers

Nginx - Can I specify rate in limit_req_zone in requests per hour?

While limiting the number of requests from an IP, I am using limit_req_zone $binary_remote_addr zone=one:10m rate=1r/m; I can specify the rate in r/m (requests per minute) or r/s (requests per second). Is there a way to specify the rate in …
Madhav Khakhar
  • 33
  • 1
  • 1
  • 5
3
votes
1 answer

linux tc qdisc pie (aqm) configuration with limited bandwidth

I would like to configure AQM PIE by using tc-qdisc, but at the same time I would like to limit the bandwidth to 1Mb/s. I have used similar configuration with fq_codel, i.e. I have limited the bandwidth by using htb, and later configured fq_codel…
3
votes
4 answers

Block ANY request in Bind

I'm having trouble figuring out how to block ANY dns request on BIND to lower the changes of a DNS Amplification attacks. I've seen guides online but most of them appear to perform rate limit via iptables or bind. Any tips or advice?
DNSNoobie
3
votes
1 answer

Rate limiting using haproxy per url per ip

Our servers are being hit by someone constantly. Its not DDOS. Just one ip hits one url more than 200 times a second. Currently I am blocking the user by ip tables. We are using HAproxy for load balancing. Is there a way to limit a user based on his…
Poomalairaj
  • 131
  • 1
  • 3
3
votes
2 answers

Nginx Rate Limiting by Referrer?

I've successfully set up rate limiting on IP addresses like so, limit_req_zone $binary_remote_addr zone=one:10m rate=1r/s; But I was wondering if its possible to do the same on referrers? For example, if a site gets placed in an iframe on a…
SteveEdson
  • 1,539
  • 3
  • 12
  • 23
3
votes
1 answer

Rate Limiting with HP ProCurve 5406 QOS

Is it possible to enable an absolute value rate limit using QOS on a HP ProCurve 5406 switch for a particular IP address on a specific port? We have a 10Mbps head end connection for multiple locations that is a single physical port. Occasionally a…
user62491
3
votes
2 answers

HAProxy stops accepting connections

I've been using HAProxy to loadbalance my appservers for many months without problems. Recently some traffic spikes have lead me to setting the maxconn parameter to rate-limit connections to my backend servers. It works great for several hours, and…
erikcw
  • 697
  • 14
  • 22
3
votes
2 answers

URL-based request rate limiting in Apache

There are many rate limiting and QoS tools out there, but so far I have not been able to find one that meets my specific needs, as follows: I have a web app running on Apache 2.2 and I want each of my customers to be limited to, say, 10000 requests…
Matt White
  • 706
  • 1
  • 5
  • 18
3
votes
2 answers

iptables rate-limit module problem

I am using iptables' rate-limit module to prevent DoS attack (I know it cannot stop a full scale DDoS but at least it can help with smaller attacks). In my rules I have something like: /sbin/iptables -A INPUT -p TCP -m state --state NEW -d…
3
votes
1 answer

Windows 2008: throttling network bandwidth of a process

Is it possible to limit the network bandwidth of a process on Windows 2008? We need to run a long running upload but don't want to saturate the network (we have time).
Piotr
  • 195
  • 1
  • 6
3
votes
3 answers

Limit number of requests to a specific set of URLs by IP address

I am working on a site, which is going to allow downloads to users, there will be around 2,000,000 files which can be downloaded. We want to discourage people from crawling and taking all of these documents so would like to limit the number of…
Jeremy French
  • 675
  • 3
  • 12
  • 25
3
votes
1 answer

Can I use rate-limiting with HTTP basic authentication in Apache?

So I'm running a few popular web applications on my server. I want these to be reachable from any computer without creating too many vulnerabilities. I am using Apache 2.4.29 as my HTTP server. My current idea for hiding potential security…
3
votes
1 answer

Exclude location from NGINX rate limiting

I have both limit_req_zone and limit_req defined in the http block of nginx so it will apply to all server and location blocks. Is there a way to exclude a certain location or server block from that limit? nginx.conf: http { ... limit_req_zone…