exception for NGINX limit_req_zone

[fhal]

Hi Francis,

Thanks very much for your reply.
It still doesn't work.
The URL I want to exclude is like
/forum.php?mod=image&aid=1289568&size=300x300&key=6831686b88a927b0d9646529f88f5052&nocache=yes&type=fixnone
Does it because there are too many parameters, the map is not working?




At 2012-07-22 04:08:20,"Francis Daly" <francis at daoine.org> wrote:
>On Sat, Jul 21, 2012 at 10:26:23AM +0800, fhal wrote:
>
>Hi there,
>
>> I tried to use map, but it doesn't work. Below is the settings.
>
>It seems to work for me, in a slightly different test:
>
>>     map $arg_mod $forum_limit {
>>         default  $binary_remote_addr;
>>         image    '';
>>         }
>>     limit_conn_zone  $forum_limit  zone=addr:128m;
>>     limit_req_zone  $forum_limit  zone=refresh:128m   rate=3r/s;
>
>I use "rate=1r/m", because that makes it very easy to see that things
>are being blocked or not. But otherwise, those 6 lines are in nginx.conf.
>
>server {
>    location = /file {
>        limit_req zone=refresh burst=2 nodelay;
>    }
>}
>
>Now test:
>
>for i in a b c d; do curl http://127.0.0.1:8000/file?mod=im; sleep 1; done
>
>gives me "file contents" 3 times, and then the 503 Service Temporarily
>Unavailable message.
>
>for i in a b c d; do curl http://127.0.0.2:8000/file?mod=im; sleep 1; done
>
>is the same, while
>
>for i in a b c d; do curl http://127.0.0.1:8000/file?mod=image; sleep 1; done
>
>gives me "file contents" 4 times. Repeat the first command, and I get
>503 4 times; repeat the last, and I get "file contents" 4 times.
>
>That looks to me like the thing is restricted by ip address to 1 request
>per minute, bursting to 2 extra; unless "mod=image" is included, in
>which case there is no restriction.
>
>Note that I haven't tested limit_conn here, just limit_req, because that
>is easier to build a test case for.
>
>Does that test work or fail for you?
>
>When I repeat the test with a fastcgi_pass configuration, instead of just
>loading a file, I see the same results.
>
>All the best,
>
>	f
>-- 
>Francis Daly        francis at daoine.org
>
>_______________________________________________
>nginx mailing list
>nginx at nginx.org
>http://mailman.nginx.org/mailman/listinfo/nginx
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nginx.org/pipermail/nginx/attachments/20120722/8d36d322/attachment.html>