Rate Limiting Apache: Units associated with "burst_rate_limit" ?

Patrick Rynhart <[email protected]> Fri, 11 Mar 2022 03:59:42 +0000

Newsgroups	gmane.comp.apache.mod-security.user
Message-ID	<SYBPR01MB6464AB75F9704F3D510A03D0C80C9@SYBPR01MB6464.ausprd01.prod.outlook.com>

Hi all,

I’m wanting to introduce IP based rate limiting protection to our Apache config, and am basing my config off this Gist:

https://gist.github.com/josnidhin/91d1ea9cd71fde386c27a9228476834e

I’m wanting to understand the line:

SecRule IP:ACCESS_COUNT "@gt {{ burst_rate_limit }}" "phase:2,pause:300,deny,status:503,setenv:RATELIMITED,skip:1,nolog,id:102"

In particular what are the units associated with burst_rate_limit ?  What does it mean if you set this variable to a value like 100 ?  (Does this correspond to a rate of 100 per minute ?  If not, what does it correspond to ?)

Thanks,

Patrick

_______________________________________________
mod-security-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mod-security-users
Commercial ModSecurity Rules and Support from Trustwave's SpiderLabs:
http://www.modsecurity.org/projects/commercial/rules/
http://www.modsecurity.org/projects/commercial/support/