Throttle requests per client over a time unit.
| |
|---|
| Type | rateLimit |
| Category | Traffic |
Fields
| Field | Type | Required | Default | Description |
|---|
unit | one of second, minute, hour | yes | minute | Per. |
requestsPerUnit | number | yes | 100 | Requests per unit. |
burst | number | no | — | Extra requests allowed in a short spike. |
banAfter | number | no | — | Ban a client after this many rejected requests. |
banDuration | duration (e.g. 10m) | no | 10m | How long a banned client stays blocked, e.g. 10m. |
keyStrategy | group | no | — | How clients are identified for throttling. |
keyStrategy
How clients are identified for throttling.
| Field | Type | Required | Default | Description |
|---|
source | one of ip, header, cookie | no | — | What identifies a client. |
name | text | no | — | Header or cookie name (when source is header/cookie). |