How to use cookie for request/conection limiting

Arvind Jayaprakash work at anomalizer.net
Fri Oct 30 20:20:42 MSK 2009


On Oct 29, piavlo wrote:
>Hi,
>I'd like to limit connections and/or request based on cookies
>
>Is it possible to do it with something like this:
>
>limit_req_zone  $cookie_somename  zone=one:10m   rate=1r/s;
>
>?
>
>The only thing I've found is http://hg.mperillo.ath.cx/nginx/mod_parsed_vars/file/70df16b39e79/README
>but this module has not been updated for 2 years.

Are you trying to limit genuine or malicious users? A malicious user can
always circumvet the limites by creating his own cookies and sending
them.





More information about the nginx mailing list