如何使用Apache实施速率限制？（每秒请求数）

Question

哪些技术和/或模块可用于在Apache中实施可靠的速率限制（请求|字节/ ip /单位时间）？

Answer 1

最好的mod_evasive（更多地关注减少DoS暴露）mod_cband（“正常”带宽控制的最佳功能）其余的mod_limitipconnmod_bwmod_bwshare

Answer 2

如本博文所述，似乎可以使用mod_security来实现每秒的速率限制。配置是这样的：SecRuleEngine On<LocationMatch "^/somepath">&nbsp; SecAction initcol:ip=%{REMOTE_ADDR},pass,nolog&nbsp; SecAction "phase:5,deprecatevar:ip.somepathcounter=1/1,pass,nolog"&nbsp; SecRule IP:SOMEPATHCOUNTER "@gt 60" "phase:2,pause:300,deny,status:509,setenv:RATELIMITED,skip:1,nolog"&nbsp; SecAction "phase:2,pass,setvar:ip.somepathcounter=+1,nolog"&nbsp; Header always set Retry-After "10" env=RATELIMITED</LocationMatch>ErrorDocument 509 "Rate Limit Exceeded"