Re: how to configure request rate limiting by Kerberos authenticated user?

2020-08-06 Thread George Nica
Thank you Maxim. Adding an extra variable to the spnego auth module sounds intriguing, but also challenging because; as you mention "rate limiting happens before access checks" and this module mainly deals with access checks until now. Sounds like an extra level of proxying is the way ahead for

Re: how to configure request rate limiting by Kerberos authenticated user?

2020-08-05 Thread Maxim Dounin
Hello! On Wed, Aug 05, 2020 at 09:21:42PM +, Nica, George wrote: > We are currently using "limit_req_zone $binary_remote_addr" for rate > limiting. However, some of our users are connecting from more than one IP > address, using clients running on computer grids. > We wanted to do request

how to configure request rate limiting by Kerberos authenticated user?

2020-08-05 Thread Nica, George
Hi, We are currently using "limit_req_zone $binary_remote_addr" for rate limiting. However, some of our users are connecting from more than one IP address, using clients running on computer grids. We wanted to do request rate limiting by authenticated user (in addition to the existing one by