NGINX rate limiting

[jasonwch]

main config:

limit_req_zone $binary_remote_addr zone=mylimit:10m rate=5r/s;

Template:
limit_req zone=mylimit burst=10 nodelay

I am studying on this.

As checked with nginx -V, HestisCP NGINX is built “–with-http_realip_module“

Which means this variable → $binary_remote_addr should be set correctly? instead of needed to use $real_ip_header?

ref: https://serverfault.com/questions/487463/nginx-rate-limiting-with-x-forwarded-for-header

[sahsanu]

@jasonwch

limit_req_zone $binary_remote_addr zone=mylimit:10m rate=5r/s;

You should keep using $binary_remote_addr. This variable will contain the correct client IP, regardless of whether the client connects directly or through Cloudflare (for Cloudflare, Hestia configures Nginx to get the real client IP using the realip module).