Skip to content

Commit 1ae4afe

Browse files
authored
rate limits: update for staging, and errant value in production (#1881)
# Important - If this PR updates a file in `content/en` with a `lastmod` field, it **must** be updated. - If this PR is a translation, please read [TRANSLATION.md](./TRANSLATION.md) first.
1 parent 20c644f commit 1ae4afe

File tree

2 files changed

+24
-10
lines changed

2 files changed

+24
-10
lines changed

Diff for: content/en/docs/rate-limits.md

+2-2
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
title: Rate Limits
33
slug: rate-limits
44
date: 2018-01-04
5-
lastmod: 2024-12-17
5+
lastmod: 2025-04-01
66
show_lastmod: true
77
---
88

@@ -268,7 +268,7 @@ being overwhelmed by clients that make too many requests at once.
268268
| /acme/revoke-cert | 10 | 100 |
269269
| /acme/renewal-info | 1000 | 100 |
270270
| /acme/* | 250 | 125 |
271-
| /directory | 40 | N/A |
271+
| /directory | 40 | 40 |
272272

273273
Subscribers who exceed these limits will receive a `503 Service Unavailable`
274274
HTTP response code. The response will include a `Retry-After` header.

Diff for: content/en/docs/staging-environment.md

+22-8
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
title: Staging Environment
33
slug: staging-environment
44
date: 2018-01-05
5-
lastmod: 2024-06-11
5+
lastmod: 2025-04-01
66
show_lastmod: 1
77
---
88

@@ -17,13 +17,27 @@ If you're using Certbot, you can use our staging environment with the `--test-ce
1717

1818
# Rate Limits
1919

20-
The staging environment uses the same rate limits as [described for the production environment](/docs/rate-limits) with the following exceptions:
21-
22-
* The **Certificates per Registered Domain** limit is 30,000 per week.
23-
* The **Duplicate Certificate** limit is 30,000 per week.
24-
* The **Failed Validations** limit is 60 per hour.
25-
* The **Accounts per IP Address** limit is 50 accounts per 3 hour period per IP.
26-
* For ACME v2, the **New Orders** limit is 1,500 new orders per 3 hour period per account.
20+
The staging environment uses the same rate limits as [described for the production environment](/docs/rate-limits) but with different values:
21+
22+
* The **[New Registrations per IP Address](/docs/rate-limits/#new-registrations-per-ip-address)** limit is 50 per 3 hours.
23+
* The **[New Registrations per IPv6 Range](/docs/rate-limits/#new-registrations-per-ipv6-range)** limit is 500 per 3 hours (the same as production).
24+
* The **[New Orders per Account](/docs/rate-limits/#new-orders-per-account)** limit is 1500 per 3 hours.
25+
* The **[New Certificates per Registered Domain](/docs/rate-limits/#new-certificates-per-registered-domain)** limit is 30000 per second.
26+
* The **[New Certificates per Exact Set of Hostnames](/docs/rate-limits/#new-certificates-per-exact-set-of-hostnames)** limit is 30000 per week.
27+
* The **[Authorization Failures per Hostname per Account](/docs/rate-limits/#authorization-failures-per-hostname-per-account)** limit is 200 per hour.
28+
* The **[Consecutive Authorization Failures per Hostname per Account](/docs/rate-limits/#consecutive-authorization-failures-per-hostname-per-account)** limit is 3600 per 6 hours.
29+
30+
The [Overall Requests Limits](/docs/rate-limits/#overall-requests-limit) are:
31+
32+
| Endpoint | Requests per IP (per second) | Burst Capacity |
33+
|--------------------|------------------------------|----------------|
34+
| /acme/new-nonce | 20 | 10 |
35+
| /acme/new-account | 5 | 15 |
36+
| /acme/new-order | 20 | 40 |
37+
| /acme/revoke-cert | 10 | 100 |
38+
| /acme/renewal-info | 1000 | 100 |
39+
| /acme/* | 20 | 20 |
40+
| /directory | 40 | 40 |
2741

2842
# Staging Certificate Hierarchy
2943

0 commit comments

Comments
 (0)