limit_req applied to upstream auth_request requests?

[Maxim Dounin]

Hello!

On Tue, Jul 17, 2018 at 05:23:44PM -0400, jarstewa wrote:

[...]

> So, I think you seem to be suggesting that throttling /auth should not be
> necessary, and may in fact be a bad idea.  But I would still like to
> understand why it isn't working as I would expect.

The explanation on why it isn't working was in the first paragraph 
I wrote:

: The limit_req directive doesn't try to limit requests already 
: limited, as well as subrequests within these requests. You should 
: configure all limits you want to apply to a request in one place.

-- 
Maxim Dounin
http://mdounin.ru/