Limiting number of client TLS connections

2023-11-17 Thread Zero King
Hi all, I want Nginx to limit the rate of new TLS connections and the total (or per-worker) number of all client-facing connections, so that under a sudden surge of requests, existing connections can get enough share of CPU to be served properly, while excessive connections are rejected and r

Re: Limiting number of client TLS connections

2023-11-20 Thread Zero King
Hi Maxim, Thanks for your reply! In our case, layer-4 firewall is difficult to introduce in the request path. Would you consider rate limiting in Nginx a valid feature request? On 19/11/23 08:11, Maxim Dounin wrote: Hello! On Sat, Nov 18, 2023 at 02:44:20PM +0800, Zero King wrote: I want

Re: Limiting number of client TLS connections

2023-11-25 Thread Zero King
. You'd have additional overhead from the stream tcp proxy and the njs, but it shouldn't be too great (at least compared to overhead of TLS handshakes). Regards, Jordan Carter. From: nginx on behalf of Zero King Sent: Saturday, November 18, 2023

Re: Limiting number of client TLS connections

2024-03-30 Thread Zero King
t this for stream (and your use case) with minor modifications (use js_access rather than 'if' as mentioned previously, setting key to a fixed value). Just forwarding it on in case you need it. On Sat, 25 Nov 2023 16:03:37 +0800 Zero King wrote: Hi Jordan, Thanks for your suggestion.