How to use cookie for request/conection limiting

piavlo nginx-forum at nginx.us
Sat Oct 31 01:21:30 MSK 2009


anomalizer Wrote:
-------------------------------------------------------

> Are you trying to limit genuine or malicious
> users? A malicious user can
> always circumvet the limites by creating his own
> cookies and sending
> them.

Genuine users of specific application - this why I though that session should be most reliable way. The other option
is to limit by IP but AFAIU this is not good in case several users are connecting from behind the same proxy.
Could you recommend other options?

 Thanks

Posted at Nginx Forum: http://forum.nginx.org/read.php?2,18135,18474#msg-18474






More information about the nginx mailing list