Limitting connection Per ip

[Hnaseri]

Hi , I would like to limit the number of connections that each IP can make to my server.
How can i do this with vestacp?
Thanks

[skurudo]

With nginx you can do it.

1. Make file /etc/nginx/conf.d/limits.conf ->

Code: Select all

nano /etc/nginx/conf.d/limits.conf

With content:

Code: Select all

limit_conn_zone $binary_remote_addr zone=pip:10m;
limit_req_zone $binary_remote_addr zone=prs:10m rate=1r/s;

2. In /home/user/conf/web/nginx.conf in server section

Code: Select all

limit_conn pip 3;
limit_conn_status 503;
limit_req zone=prs burst=35 nodelay;

3. restat nginx

Code: Select all

nginx -t
service nginx restart

[Hnaseri]

With nginx you can do it.
[/code]

Thank you very much for your reply.
Lets say we have assigned n as the maximum number of connections. If an ip tries to make n+1 connections, does this code drops the extra connection? Or it simply blocks the entire n+1 connections?

[skurudo]

Lets say we have assigned n as the maximum number of connections. If an ip tries to make n+1 connections, does this code drops the extra connection? Or it simply blocks the entire n+1 connections?

In this example nginx show status 503 (Service Unavailable), but you can drop connection via 444 status.
http://nginx.org/en/docs/http/ngx_http_ ... onn_status

This number is your "n"

Code: Select all

limit_conn pip 3;

[violajsilver]

Thank you very much for the post. I was exactly searching for the same thread.

[skurudo]

Thank you very much for the post. I was exactly searching for the same thread.

Sorry, hardly believe that.

[Hnaseri]

In this example nginx show status 503 (Service Unavailable), but you can drop connection via 444 status.

So you're saying that the following code will drop extra connections?

Code: Select all

limit_conn_status 444;

[skurudo]

So you're saying that the following code will drop extra connections?

Code: Select all

limit_conn_status 444;

I'm and nginx documentation/examples ;-)

[skurudo]

Stops processing and returns the specified code to a client. The non-standard code 444 closes a connection without sending a response header.

http://nginx.org/en/docs/http/ngx_http_ ... tml#return

[Hnaseri]

I'm and nginx documentation/examples ;-)

thank you very much for your reply.
please also advise me on this topic: http://forum.vestacp.com/viewtopic.php?f=10&t=11332
I am really eager to install vestacp and try these codes :)
thanks