ngx_dynamic_limit_req_module?用于動態(tài)鎖定 ip 和釋放、動態(tài)限流，對于防止惡意刷接口效果理想。

配置模板：

worker_processes??2;
events?{
????worker_connections??1024;
}
http?{
????include???????mime.types;
????default_type??application/octet-stream;
????sendfile????????on;
????keepalive_timeout??65;
????
????dynamic_limit_req_zone?$binary_remote_addr?zone=one:10m?rate=100r/s?redis=127.0.0.1?block_second=300;
????dynamic_limit_req_zone?$binary_remote_addr?zone=two:10m?rate=50r/s?redis=127.0.0.1?block_second=600;
????
????
????server?{
????????listen???????80;
????????server_name??localhost;
????????location?/?{
????????????root???html;
????????????index??index.html?index.htm;
????????????dynamic_limit_req?zone=one?burst=80?nodelay;
????????????dynamic_limit_req_status?403;
????????}
????????error_page???500?502?503?504??/50x.html;
????????location?=?/50x.html?{
????????????root???html;
????????}
????}
????server?{
????????listen???????80;
????????server_name??localhost2;
????????location?/?{
????????????root???html;
????????????index??index.html?index.htm;
????????????dynamic_limit_req?zone=two?burst=50?nodelay;
????????????dynamic_limit_req_status?403;
????????}
????????error_page???500?502?503?504??/50x.html;
????????location?=?/50x.html?{
????????????root???html;
????????}
????}
}

?

支持黑白名單

白名單規(guī)則

redis-cli?set whiteip ip

黑名單規(guī)則

redis-cli?set ip ip