4 ms·
Thanks 8), rate limiting is just the most basic of nginx configs to like, 10 requests / second / ip
by bontaq 6y ago
Thanks 8), rate limiting is just the most basic of nginx configs to like, 10 requests / second / ip
- NetOpWibby 6y agoOh nice, that sounds simple enough.
- sreekotay 6y agoReally simple cool! One minor thing on the IP rate limiting side.... LOTS of mobile/cell users might end up NAT'ed behind a single IP. Just an FYI.
- blisseyGo 6y agoThat's a good point. How does one rate limit correctly in that case?
- lioeters 6y agoI don't think it's possible to correctly rate limit IPs behind NAT, at least with NGINX. > Note that IP addresses can be shared behind NAT devices, so limiting by IP address should be used judiciously. https://docs.nginx.com/nginx/admin-guide/security-controls/controlling-access-proxied-http/ https://docs.nginx.com/nginx/admin-guide/security-controls/c...
- anderspitman 6y agoRate limiting by data UUID might actually be pretty effective. I should add that to patchbay.pub.
- blisseyGo 6y agoThat might be an issue if someone is using it to deliver lets say settings json and multiple users try to request the file.
- sreekotay 6y agowellllll there's no GREAT answer. Usuallllllyyy this is why some lightweight authentication is a good idea? Some kind of TGT/token scheme, and then rate limit based on that? But does make it all a little less "just works"