3 ms·
> A request that arrives with no credentials gets 60 requests per hour per IP address. One request per minute.
by ddtaylor 9d ago
> A request that arrives with no credentials gets 60 requests per hour per IP address.
One request per minute.
- Jaxan 9d agoDoesn’t help with scrapers though. They use a unique IP for each query.
- yjftsjthsd-h 9d agoBut it will hit any human behind a CGNAT:)
- mplanchard 9d agoAverage, yes, but the way they phrase it, it could be a token bucket or similar, where you can do 60 quick requests and then be blocked for a bit while the bucket refills
- sandeepkd 9d agoMore like you have 60 requests, you can exhaust them in a single second or spread them differently as per your choice.
- MeetingsBrowser 9d agoHopefully they bump this up. Browsing open issues or reviewing a few PRs will easily use more than one request per minute. The limits are based on the average user but I wonder if the most common interaction is to view a readme and bounce. I don’t know that putting a paywall up to learn from or even consider contributing to public projects is a good thing.
- silverwind 9d agoOr a lot more with IPv6.
- ddtaylor 9d agoMost connections or VPS have a shared 64bit prefix that acts similar to an IPv4 address in that it's easy to block. Yes, you get 64 more bits to make whatever addresses you want, but the prefix is still your fingerprint.
- mahboi 8d agoCould even do /32 if they want to make it as scarce as ipv4
- nijave 9d agoRIP NAT https://gitlab.com/gitlab-org/gitlab https://gitlab.com/gitlab-org/gitlab Makes 12 graphql API calls and 2 /api/v4 calls... So you get like 4 pages per hour unauth?