Re: limit_req_zone for IPv6 subnets

2021-04-05 Thread Christian Staudte
Hi, On 05.04.21 01:13, Maxim Dounin wrote: > You can use anything as a key in limit_req_zone, including your > own variables. If you want to limit IPv6 addresses per /64 > subnets, something like this should work: > > map $binary_remote_addr $subnet { > "~^(\C{8})" $1; > defaul

Re: limit_req_zone for IPv6 subnets

2021-04-04 Thread Maxim Dounin
Hello! On Sun, Apr 04, 2021 at 10:13:46PM +0200, Christian Staudte wrote: > regarding rate limiting in IPv6 configurations I see the following > problem: As normally a subnet between a /56 and a /64 is assigned to a > client by an ISP, and both $binary_remote_addr and $remote_addr always > contai

RE: limit_req_zone for IPv6 subnets

2021-04-04 Thread Thomas Ward
I dont think limit_req works on CIDR rather individual IPs.  At least per the description of the module for limiting requests, it works on a single IP level not on a CIDR range level and I don't immediately see a way to make that happen - whether IPv4 or IPv6.Sent from my T-Mobile 4G LTE Device