vbatts/quay
Archived
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Add rate limiting to nginx.

Browse source 
The only caveat is that "One megabyte zone can keep about 16 thousand
64-byte states. If the zone storage is exhausted, the server will return
the 503 (Service Temporarily Unavailable) error to all further
requests."
  -- nginx documentation
This commit is contained in:
Jimmy Zelinskie 2015-01-13 15:59:04 -05:00
parent 53e9e514d5
commit 6cbd4ee4fe
3 changed files with 14 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
conf/nginx-nossl.conf
View file

@ -5,6 +5,8 @@ include root-base.conf;
http { http {
include http-base.conf; include http-base.conf;
include rate-limiting.conf;
server { server {
include server-base.conf; include server-base.conf;

6
conf/rate-limiting.conf Normal file
View file

@ -0,0 +1,6 @@
# vim: ft=nginx
limit_req_zone $binary_remote_addr zone=webapp:10m rate=10r/s;
limit_req_zone $binary_remote_addr zone=api:10m rate=1r/s;
limit_req_status 429;
limit_req_log_level warn;

6
conf/server-base.conf
View file

@ -21,6 +21,8 @@ proxy_set_header Transfer-Encoding $http_transfer_encoding;
location / { location / {
proxy_pass http://web_app_server; proxy_pass http://web_app_server;
limit_req zone=webapp burst=10 nodelay;
} }
location /realtime { location /realtime {
@ -39,6 +41,8 @@ location /v1/ {
proxy_temp_path /var/log/nginx/proxy_temp 1 2; proxy_temp_path /var/log/nginx/proxy_temp 1 2;
client_max_body_size 20G; client_max_body_size 20G;
limit_req zone=api burst=5 nodelay;
} }
location /c1/ { location /c1/ {
@ -49,6 +53,8 @@ location /c1/ {
proxy_pass http://verbs_app_server; proxy_pass http://verbs_app_server;
proxy_read_timeout 2000; proxy_read_timeout 2000;
proxy_temp_path /var/log/nginx/proxy_temp 1 2; proxy_temp_path /var/log/nginx/proxy_temp 1 2;
limit_req zone=api burst=5 nodelay;
} }
location /static/ { location /static/ {