[Charlotte]

Thinking on this.

After some recent DDOS against slickstack.io search results, wondering if rewriting the URL could make rate-limiting rules in Nginx more effective

https://stackoverflow.com/questions/72516213/how-to-rewrite-wordpress-default-search-url-slug-to-clean-search-nginx/

[Ruth]

why would it need rewriting?

[Melissa]

why would it need rewriting?

because you need a location block for assign the rate limiter zone in Nginx.

unless you have a complex map type of approach:

https://stackoverflow.com/questions/46178259/nginx-limit-requests-by-parameter-in-body-or-query

https://github.com/littlebizzy/slickstack/blob/master/modules/nginx/sites/production.txt#L211

[Willie]

That map solution is intriguing, never seen that before…

map $arg_ctl    $do_limit {
    "param1"    $binary_remote_addr;
    default     "";
}
limit_req_zone $do_limit zone=mylimit:10m rate=10r/s;
server {
    listen       8044;
    limit_req_log_level warn;
    location /route/{
       limit_req zone=mylimit burst=1000;
       proxy_pass https://the_Cool_server/;
 }}

[Anna]

not if they be DOS’in you boys

[Author]

Posts