coop-cloud/traefik
7
2
Fork 19
Code Issues 16 Pull Requests 3 Releases Wiki Activity

feat: implement basic rate limiting by ip address #142

Merged
p4u1 merged 3 commits from rate-limits into master 2026-10-12 17:11:07 +00:00
Conversation 9 Commits 3 Files Changed 5
+28 -3
fauno commented 2026-09-09 09:12:31 +00:00
Owner
Copy Link
Copy Source
<!-- Thank you for doing recipe maintenance work! Please mark all checklist items which are relevant for your changes. Please remove the checklist items which are not relevant for your changes. Feel free to remove this comment. --> * [x] I have deployed and tested my changes * [x] I have [updated relevant versions in `abra.sh`](https://docs.coopcloud.tech/maintainers/upgrade/#updating-versions-in-the-abrash) * [x] I have made my environment variable changes [backwards compatible](https://docs.coopcloud.tech/maintainers/upgrade/#backwards-compatible-environment-variable-changes) * [ ] I have added a [release note entry](https://docs.coopcloud.tech/maintainers/upgrade/#creating-new-release-notes)
❤️ 1
fauno commented 2026-09-09 09:16:26 +00:00
Author
Owner
Copy Link
Copy Source

the middleware is enabled by default but only applies when applied to every service or individual services export it as a label.

there's another rate limit option to limit by host, which i've seen recommendations for nginx to enable in parallel to rate limits by ip with a higher limit. should i add that too?

also it supports redis for shared rate limits, so we could collaboratively rate limit between servers.

the middleware is enabled by default but only applies when applied to every service or individual services export it as a label. there's another rate limit option to limit by host, which i've seen recommendations for nginx to enable in parallel to rate limits by ip with a higher limit. should i add that too? also it supports redis for shared rate limits, so we could collaboratively rate limit between servers.
fauno force-pushed rate-limits from 2b40910287 to 28778ca411 2026-09-09 09:24:45 +00:00 Compare
file-provider.yml.tmpl Outdated
@@ -25,0 +26,4 @@
rateLimit:
average: {{ or (env "RATE_LIMIT_AVERAGE") "100" }}
burst: {{ or (env "RATE_LIMIT_BURST") "200" }}
period: "1s"
p4u1 commented 2026-09-28 08:52:10 +00:00
Owner
Copy Link
Copy Source

Can you make this configurable too

Can you make this configurable too
fauno marked this conversation as resolved
.env.sample Outdated
@@ -252,0 +254,4 @@
# You can enable universal rate limits by setting RATE_LIMIT_EVERYTHING
# to true, otherwise each app needs to export their own middleware labels.
#
# https://doc.traefik.io/traefik/reference/routing-configuration/http/middlewares/ratelimit/
p4u1 commented 2026-09-28 08:54:25 +00:00
Owner
Copy Link
Copy Source

Can you add an example on how to enable a single service via the label?

Can you add an example on how to enable a single service via the label?
fauno commented 2026-10-08 14:25:27 +00:00
Author
Owner
Copy Link
Copy Source

it's included on the docs and the recipe has to support it, do you think it's not enough pointer?

it's included on the docs and the recipe has to support it, do you think it's not enough pointer?
👍 1
p4u1 marked this conversation as resolved
p4u1 commented 2026-09-28 08:58:24 +00:00
Owner
Copy Link
Copy Source

there's another rate limit option to limit by host, which i've seen recommendations for nginx to enable in parallel to rate limits by ip with a higher limit. should i add that too?

also it supports redis for shared rate limits, so we could collaboratively rate limit between servers.

Let's add those in another pr

Could you add a release note? Would be nice to tell people about this :)

Also could you add a note on how to debug this setting? E.g. if there is a relevant metric about rate limiting

> there's another rate limit option to limit by host, which i've seen recommendations for nginx to enable in parallel to rate limits by ip with a higher limit. should i add that too? also it supports redis for shared rate limits, so we could collaboratively rate limit between servers. Let's add those in another pr Could you add a release note? Would be nice to tell people about this :) Also could you add a note on how to debug this setting? E.g. if there is a relevant metric about rate limiting
fauno added 1 commit 2026-10-03 04:31:53 +00:00
feat: implement basic rate limiting by ip address
continuous-integration/drone/pr Build is failing
Details
21ea1dd698
fauno force-pushed rate-limits from 28778ca411 to 21ea1dd698 2026-10-03 04:31:53 +00:00 Compare
p4u1 commented 2026-10-07 12:44:43 +00:00
Owner
Copy Link
Copy Source

@fauno ping :)

@fauno ping :)
fauno commented 2026-10-07 13:48:19 +00:00
Author
Owner
Copy Link
Copy Source

@fauno ping :)

pong! i'll be back in a couple hours :)

> @fauno ping :) pong! i'll be back in a couple hours :)
❤️ 1
fauno added 1 commit 2026-10-08 14:24:34 +00:00
feat: period is also configurable
continuous-integration/drone/pr Build is failing
Details
c18fca9d7c
fauno added 1 commit 2026-10-08 14:40:54 +00:00
doc: release notes
continuous-integration/drone/pr Build is failing
Details
2a2947160b
fauno commented 2026-10-08 14:40:54 +00:00
Author
Owner
Copy Link
Copy Source

added release notes!

added release notes!
❤️ 1
fauno commented 2026-10-08 14:43:54 +00:00
Author
Owner
Copy Link
Copy Source

just discovered there's another strategy to group by request header which isn't documented further, but it looks like it could apply rate limits by specific headers, like user agents.

just discovered there's another strategy to [group by request header](https://doc.traefik.io/traefik/reference/routing-configuration/http/middlewares/ratelimit/#opt-sourceCriterion-requestHeaderName) which isn't documented further, but it looks like it could apply rate limits by specific headers, like user agents.
p4u1 approved these changes 2026-10-08 19:39:47 +00:00
p4u1 merged commit 3817644e75 into master 2026-10-12 17:11:07 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
p4u1
Labels
Clear labels
bug
Something is not working
 duplicate
This issue or pull request already exists
 enhancement
New feature
 help wanted
Need some help
 invalid
Something is wrong
 question
More information is needed
 wontfix
This won't be fixed
No labels
Milestone
No items
No Milestone
Assignees
Clear assignees
3wordchant aadil (Aadil Ayub) abra-bot (Abra Bot) ammaratef45 amras (Sarma) BornDeleuze (Born Deleuze) Brooke carla cas (Cassowary) coopcloud dannygroenewegen (Danny Groenewegen) decentral1se (d1) fauno (fauno) javielico (Javielico) jjsfunhouse kawaiipunk (KawaiiPunk) knoflook moosemower moritz notplants oxaliq (sorrel) p4u1 (p4u1) renovate-bot (Comrade Renovate Bot) simon stevensting trav (Trav Fryer) yksflip
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: coop-cloud/traefik#142