Fix #6 - Rate limit GET reqs to 300/5min, POST to 100/5min

2016-09-24 13:53:54 +02:00 · 2016-09-24 13:53:54 +02:00 · 3b56350121
parent db6df6ddb3
commit 3b56350121
1 changed files with 6 additions and 2 deletions
--- a/config/initializers/rack-attack.rb
+++ b/config/initializers/rack-attack.rb
@ -1,5 +1,9 @@
 class Rack::Attack
-  throttle('req/ip', limit: 300, period: 5.minutes) do |req|
-    req.ip
+  throttle('get-req/ip', limit: 300, period: 5.minutes) do |req|
+    req.ip if req.get?
+  end
+
+  throttle('post-req/ip', limit: 100, period: 5.minutes) do |req|
+    req.ip if req.post?
  end
 end