How to prevent Rate limit attack?

168 views Asked by At

I'm using AspNetCoreRateLimit in .net6, when X-Real-IP change in request then rate limit reset.

  "IpRateLimitOptions": {
    "EnableEndpointRateLimiting": false,
    "DisableRateLimitHeaders": true,
    "StackBlockedRequests": false,
    "RealIpHeader": "X-Real-IP",
    "ClientIdHeader": "X-ClientId",
    "EndpointWhitelist": [ "get:/js/*", "get:/lib/*", "get:/fonts/*", "get:/favicon.ico" ],
    "HttpStatusCode": 429,
    "QuotaExceededMessage": "API calls quota exceeded",
    "GeneralRules": [
      {
        "Endpoint": "*",
        "Period": "1s",
        "Limit": 5
      },
      {
        "Endpoint": "*",
        "Period": "15m",
        "Limit": 100
      },
      {
        "Endpoint": "*",
        "Period": "12h",
        "Limit": 1000
      },
      {
        "Endpoint": "*",
        "Period": "7d",
        "Limit": 10000
      }
    ]
  },
0

There are 0 answers