Hi,
We are currently using "limit_req_zone $binary_remote_addr" for rate limiting.
However, some of our users are connecting from more than one IP address, using
clients running on computer grids.
We wanted to do request rate limiting by authenticated user (in addition to the
existing one by
I am currently working on a multi-tier application, trying to use nginx as load
balancer.
The issue is that nginx seems to be adding WWW-Authenticate in the 200 OK
response after the Kerberos authentication has taken place, which confuses the
client. (The client could potentially ignore it, but