|
16 | 16 | # RATE LIMITING |
17 | 17 | # All rate limiting is aggregated by client IP and domain (domain is added automatically by Netlify) |
18 | 18 | # Redirects/rules are evaluated from top to bottom and the first match will always be used by Netlify. |
| 19 | +# Our current tier only seems to allow 2 rate limiting rules. |
19 | 20 | # ------------- |
20 | 21 |
|
21 | | -# Rate limit the top most pages |
22 | | -[[redirects]] |
23 | | - from = "/home/stable/spark-k8s/" |
24 | | - to = "/home/stable/spark-k8s/" |
25 | | - [redirects.rate_limit] |
26 | | - window_limit = 10 |
27 | | - window_size = 60 |
28 | | - aggregate_by = ["ip"] |
29 | | - |
30 | | -[[redirects]] |
31 | | - from = "/home/stable/druid/" |
32 | | - to = "/home/stable/druid/" |
33 | | - [redirects.rate_limit] |
34 | | - window_limit = 10 |
35 | | - window_size = 60 |
36 | | - aggregate_by = ["ip"] |
37 | | - |
38 | | -[[redirects]] |
39 | | - from = "/home/stable/nifi/" |
40 | | - to = "/home/stable/nifi/" |
41 | | - [redirects.rate_limit] |
42 | | - window_limit = 10 |
43 | | - window_size = 60 |
44 | | - aggregate_by = ["ip"] |
45 | | - |
46 | | -[[redirects]] |
47 | | - from = "/home/stable/superset/" |
48 | | - to = "/home/stable/superset/" |
49 | | - [redirects.rate_limit] |
50 | | - window_limit = 10 |
51 | | - window_size = 60 |
52 | | - aggregate_by = ["ip"] |
53 | | - |
54 | | -[[redirects]] |
55 | | - from = "/home/stable/trino/" |
56 | | - to = "/home/stable/trino/" |
57 | | - [redirects.rate_limit] |
58 | | - window_limit = 10 |
59 | | - window_size = 60 |
60 | | - aggregate_by = ["ip"] |
61 | | - |
62 | | -[[redirects]] |
63 | | - from = "/home/stable/zookeeper/" |
64 | | - to = "/home/stable/zookeeper/" |
65 | | - [redirects.rate_limit] |
66 | | - window_limit = 10 |
67 | | - window_size = 60 |
68 | | - aggregate_by = ["ip"] |
69 | | - |
70 | | -[[redirects]] |
71 | | - from = "/home/stable/opa/" |
72 | | - to = "/home/stable/opa/" |
73 | | - [redirects.rate_limit] |
74 | | - window_limit = 10 |
75 | | - window_size = 60 |
76 | | - aggregate_by = ["ip"] |
77 | | - |
78 | | -[[redirects]] |
79 | | - from = "/home/stable/hbase/" |
80 | | - to = "/home/stable/hbase/" |
81 | | - [redirects.rate_limit] |
82 | | - window_limit = 10 |
83 | | - window_size = 60 |
84 | | - aggregate_by = ["ip"] |
85 | | - |
86 | | -[[redirects]] |
87 | | - from = "/home/stable/airflow/" |
88 | | - to = "/home/stable/airflow/" |
89 | | - [redirects.rate_limit] |
90 | | - window_limit = 10 |
91 | | - window_size = 60 |
92 | | - aggregate_by = ["ip"] |
93 | | - |
94 | | -[[redirects]] |
95 | | - from = "/home/stable/hive/" |
96 | | - to = "/home/stable/hive/" |
97 | | - [redirects.rate_limit] |
98 | | - window_limit = 10 |
99 | | - window_size = 60 |
100 | | - aggregate_by = ["ip"] |
101 | | - |
102 | | -[[redirects]] |
103 | | - from = "/home/stable/kafka/" |
104 | | - to = "/home/stable/kafka/" |
105 | | - [redirects.rate_limit] |
106 | | - window_limit = 10 |
107 | | - window_size = 60 |
108 | | - aggregate_by = ["ip"] |
109 | | - |
110 | | -[[redirects]] |
111 | | - from = "/home/stable/hdfs/" |
112 | | - to = "/home/stable/hdfs/" |
113 | | - [redirects.rate_limit] |
114 | | - window_limit = 10 |
115 | | - window_size = 60 |
116 | | - aggregate_by = ["ip"] |
117 | | - |
118 | | -[[redirects]] |
119 | | - from = "/home/stable/secret-operator/" |
120 | | - to = "/home/stable/secret-operator/" |
121 | | - [redirects.rate_limit] |
122 | | - window_limit = 10 |
123 | | - window_size = 60 |
124 | | - aggregate_by = ["ip"] |
125 | | - |
126 | | -[[redirects]] |
127 | | - from = "/home/stable/listener-operator/" |
128 | | - to = "/home/stable/listener-operator/" |
129 | | - [redirects.rate_limit] |
130 | | - window_limit = 10 |
131 | | - window_size = 60 |
132 | | - aggregate_by = ["ip"] |
133 | | - |
134 | | -[[redirects]] |
135 | | - from = "/home/stable/commons-operator/" |
136 | | - to = "/home/stable/commons-operator/" |
137 | | - [redirects.rate_limit] |
138 | | - window_limit = 10 |
139 | | - window_size = 60 |
140 | | - aggregate_by = ["ip"] |
141 | | - |
142 | 22 | #--------------------- |
143 | 23 | # ASSETS RATE LIMITING |
144 | 24 | # These limits can be set higher, because most automated requests/attacks will most likely only |
|
154 | 34 | window_size = 60 |
155 | 35 | aggregate_by = ["ip"] |
156 | 36 |
|
157 | | -# Rate limit pagefind (search) resources. This redirect rule/rate limit comes BEFORE the catch-all. |
158 | | -[[redirects]] |
159 | | - from = "/pagefind/*" |
160 | | - to = "/pagefind/:splat" |
161 | | - [redirects.rate_limit] |
162 | | - window_limit = 250 |
163 | | - window_size = 60 |
164 | | - aggregate_by = ["ip"] |
165 | | - |
166 | 37 | #------------------------ |
167 | 38 | # CATCH-ALL RATE LIMITING |
168 | 39 | # ----------------------- |
|
171 | 42 | from = "/*" |
172 | 43 | to = "/:splat" |
173 | 44 | [redirects.rate_limit] |
174 | | - window_limit = 50 |
| 45 | + window_limit = 25 |
175 | 46 | window_size = 60 |
176 | 47 | aggregate_by = ["ip"] |
0 commit comments