rate limit sample submission

thestinger · thestinger · commit 6e1d241072ee · 2021-04-19T15:42:18.000-04:00
diff --git a/nginx/nginx.conf b/nginx/nginx.conf
@@ -40,6 +40,8 @@ http {
     http2_max_concurrent_streams 32;
     limit_conn_zone $binary_remote_addr zone=addr:10m;
     limit_conn addr 256;
+    limit_req_status 429;
+    limit_req_zone $binary_remote_addr zone=sample:10m rate=6r/m;
 
     ssl_protocols TLSv1.2 TLSv1.3;
     ssl_ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256;
@@ -172,6 +174,7 @@ http {
             limit_except POST {
                 deny all;
             }
+            limit_req zone=sample burst=10 nodelay;
         }
 
         location = /challenge {

Original file line number	Diff line number	Diff line change
`@@ -40,6 +40,8 @@ http {`
`40`	`40`	`http2_max_concurrent_streams 32;`
`41`	`41`	`limit_conn_zone $binary_remote_addr zone=addr:10m;`
`42`	`42`	`limit_conn addr 256;`
	`43`	`+ limit_req_status 429;`
	`44`	`+ limit_req_zone $binary_remote_addr zone=sample:10m rate=6r/m;`
`43`	`45`
`44`	`46`	`ssl_protocols TLSv1.2 TLSv1.3;`
`45`	`47`	`ssl_ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256;`
`@@ -172,6 +174,7 @@ http {`
`172`	`174`	`limit_except POST {`
`173`	`175`	`deny all;`
`174`	`176`	`}`
	`177`	`+ limit_req zone=sample burst=10 nodelay;`
`175`	`178`	`}`
`176`	`179`
`177`	`180`	`location = /challenge {`