How to limit Nginx to max 50 request per second independent from IP

frlan

6/8/23, 2:27 PM

I'm looking for a way to limit Nginx for location to a number of requests per second independent of the origin IP. From my understanding the rate limiting feature is IP sensitive which cannot be turned off.

What would be the right approach here?

206

0 + 0

nginx

rate-limiting

AlexD

6/8/23, 2:44 PM

Does this answer your question? [Nginx limit requests globally](https://serverfault.com/questions/817164/nginx-limit-requests-globally)

frlan

6/9/23, 11:49 AM

From my understanding all these options are by IP. So it works if you have e.g. 10r/m from one IP, but what you having request from a /8 or even /0? Am I just missunderstanding the documentation maybe?

DylanYoung

9/9/23, 7:55 PM

All those options aren't by IP. The answer here uses a static word (global) to bucket the requests, so all requests will go in the same bucket and be limited independent of IP: https://serverfault.com/a/817165/362828 This part in the question is what makes it by IP: `$binary_remote_addr`. But that key can be set to anything (e.g. you could limit based on a cookie or the request url).

Score:0

Server

DylanYoung

9/9/23, 8:05 PM

Like so

limit_req_zone global zone=global_limit:1k rate=50/s;

The global part is the key Nginx uses to bucket requests. By setting it to a static string (could be anything), rather than a variable, all requests will go into the same bucket.

To limit by IP, you would set it to $binary_remote_addr. You can rate limit on just about anything (see https://www.nginx.com/blog/dynamic-bandwidth-limits-nginx-plus-key-value-store/#Complete-Sample-NGINX-Configuratio for a complex example).

0 + 0

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: How to limit Nginx to max 50 request per second independent from IP

TH: วิธีจำกัด Nginx ให้สูงสุด 50 คำขอต่อวินาทีโดยไม่ขึ้นกับ IP

RO: Cum să limitați Nginx la maximum 50 de solicitări pe secundă, independent de IP

RU: Как ограничить Nginx до 50 запросов в секунду независимо от IP

VI: Cách giới hạn Nginx tối đa 50 yêu cầu mỗi giây độc lập với IP

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.