nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Limiting rate of requests

Jason Friedman

I want to limit the rate of requests to Confluence from any one IP address (I do not know the address ahead-of-time). We sometimes experience out-of-control applications that hit our wiki too much, negatively impacting response time for users. We would like to drop/discard/ignore excess requests.

Our wiki is not externally facing, so excess requests are always inadvertent rather than intentional.

Accepted answers

Daniel Wester

You could just use nginx in front of it (or another proxy): http://nginx.org/en/docs/http/ngx_http_limit_req_module.html

All comments

Norman Abramovitz

Your question is too ambiguous. Are trying to solve your issue from receiving side or the sending side? Do you have any control (ie make modifications) to the code? Can you throw away the requests or must you queue the request for later processing?

Jason Friedman

Thank you, Norman, I edited my question to be more clear.

Norman Abramovitz

Even if the excessive requests are unintentional, you need to treat it like a denial of service attack. There are multiple ways to handle this and some depends on your networking environment.

If the users are habitual, you might be able to look in your logs to get their ip address and stop them from performing the negative effecting requests.

You might be able to pay for a service for a few months to weed out those users.

If you think you need a longer term solution, then you should install denial of service software within your network.

If you just want to effect the user as it is happening you could change the ip router on the confluence machine to null route that ip address since your case is not a full blown denial of service attack.

The command to use is dependent on your environment, but logically it should look something like

route add -host &lt;ipaddr&gt; reject

Daniel Wester

You could just use nginx in front of it (or another proxy): http://nginx.org/en/docs/http/ngx_http_limit_req_module.html

Norman Abramovitz

Agree, that is another potential solution!

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

confluence

confluence-administration