Author Topic: Connection Limiting Settings with x_forwarded_for support ?  (Read 3094 times)

perlish

  • Expert
  • ****
  • Posts: 26
    • View Profile
”Connection Limiting Settings“ can do the rate limit for web access,but it did not support x_forwarded_for ,so if our user visit the website through CDN,we can not fire up the function to defeated the cc flood.

Owen

  • Wizard
  • *****
  • Posts: 61
  • Zeus developer, "borrowed" by marketing
    • View Profile
    • Splash
    • Email
Re: Connection Limiting Settings with x_forwarded_for support ?
« Reply #1 on: May 17, 2012, 12:42:54 pm »
You can either whitelist the IP addresses of the proxies (this may not be possible if there are many or they change frequently) or you could implement the connection limiting in TrafficScript:

If there is no X-Forwarded-For header in the request, then rate-limit transactions on a per-client-IP basis


I hope that this will help you to achieve what you desire

Owen

perlish

  • Expert
  • ****
  • Posts: 26
    • View Profile
Re: Connection Limiting Settings with x_forwarded_for support ?
« Reply #2 on: May 22, 2012, 03:50:21 am »
thank you very much!
it will be solved in your way.

perlish

  • Expert
  • ****
  • Posts: 26
    • View Profile
Re: Connection Limiting Settings with x_forwarded_for support ?
« Reply #3 on: June 22, 2012, 01:42:40 am »
You can either whitelist the IP addresses of the proxies (this may not be possible if there are many or they change frequently) or you could implement the connection limiting in TrafficScript:

If there is no X-Forwarded-For header in the request, then rate-limit transactions on a per-client-IP basis


I hope that this will help you to achieve what you desire

Owen

would you like to tell me how can I get the real ip from X-Forwarded-For ?
thank you !

sandy

  • Newcomer
  • *
  • Posts: 1
    • View Profile
    • abercrombie and fitch
Re: Connection Limiting Settings with x_forwarded_for support ?
« Reply #4 on: November 19, 2012, 07:40:45 am »
”Connection Limiting Settings“ can do the rate limit for web access,but it did not support x_forwarded_for ,so if our user visit the website through CDN,we can not fire up the function to defeated the cc flood.