limit_req applied to upstream auth_request requests?

Maxim Dounin mdounin at
Wed Jul 18 12:15:42 UTC 2018


On Tue, Jul 17, 2018 at 05:23:44PM -0400, jarstewa wrote:


> So, I think you seem to be suggesting that throttling /auth should not be
> necessary, and may in fact be a bad idea.  But I would still like to
> understand why it isn't working as I would expect.

The explanation on why it isn't working was in the first paragraph 
I wrote:

: The limit_req directive doesn't try to limit requests already 
: limited, as well as subrequests within these requests. You should 
: configure all limits you want to apply to a request in one place.

Maxim Dounin

More information about the nginx mailing list