Skip to content

Improve rate limiting#10860

Merged
Gargron merged 3 commits intomastodon:masterfrom
ClearlyClaire:fixes/rate-limit
May 27, 2019
Merged

Improve rate limiting#10860
Gargron merged 3 commits intomastodon:masterfrom
ClearlyClaire:fixes/rate-limit

Conversation

@ClearlyClaire
Copy link
Copy Markdown
Contributor

  • Use actual client IP for whitelisting and rate limiting when a reverse-proxy is involved
  • Reduce allowed number of unauthenticated API requests
  • Aggressively limit requests which involve paging

@ClearlyClaire
Copy link
Copy Markdown
Contributor Author

I'm not sure how much sense the limits make, and they'll probably affect search engine crawlers negatively.
One reason for this was to make life harder for people trying to archive public toots of an instance by crawling. I don't know how effective those limits would be.

@Gargron Gargron merged commit 0e9b8be into mastodon:master May 27, 2019
noellabo added a commit to noellabo/mastodon that referenced this pull request May 28, 2019
hiyuki2578 pushed a commit to ProjectMyosotis/mastodon that referenced this pull request Oct 2, 2019
* Rate limit based on remote address IP, not on potential reverse proxy

* Limit rate of unauthenticated API requests further

* Rate-limit paging requests to one every 3 seconds
messenjahofchrist pushed a commit to Origin-Creative/mastodon that referenced this pull request Jul 30, 2021
* Rate limit based on remote address IP, not on potential reverse proxy

* Limit rate of unauthenticated API requests further

* Rate-limit paging requests to one every 3 seconds
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants