ip rate limiting

Mon, 26 Nov 2018 02:00:26 -0800

Oh yes, how silly of me having missed it...

For ratelimit-below-domain is there a wildcard syntax eligable, e.g.

for second level domain queries = ratelimit-below-domain: .* 2

or third level domain queries: = ratelimit-below-domain: *.* 1

The limiting is scaled to seconds (qps) only and there is no option for a per minute or per hour (or per domain record TTL)?

I was thinking that a combined logic (ip-ratelimit + ratelimit-below-domain) per ip-ratelimit-below-domain would be useful.

On 26.11.2018 10:28,  Unbound-users wrote:
Hi,

Unbound has ratelimit options for both user query count (ip-ratelimit)
and number of iterative queries under a domain beneath a zone
(ratelimit-below-domain and ratelimit-for-domain).  The first is per-IP
address, the second based on domain name.  Could set a global number, or
specify the culprit's client-IP or the tunnel service domain name.

Best regards, Wouter

Reply via email to