Reference

Reference: server.security

server.security.per_ip

Syntaxper_ip: {...}
Defaultnone
Contextserver.security
Reloadadding or removing it needs a restart; its values apply on reload

Limits per client address (IPv6 clients grouped per /64); absent: no per-client limits.

server.security.per_ip.burst

Syntaxburst: <integer>
Defaultrequests_per_second
Contextserver.security.per_ip
Reloadapplies on reload

Requests a client may send at once above the rate; default: the rate itself.

server.security.per_ip.max_connections

Syntaxmax_connections: <integer>
Defaultnone
Contextserver.security.per_ip
Reloadapplies on reload

Open connections allowed per client address.

server.security.per_ip.requests_per_second

Syntaxrequests_per_second: <integer>
Defaultnone
Contextserver.security.per_ip
Reloadapplies on reload

Sustained requests per second per client address (429 beyond).

server.security.per_ip.table_size

Syntaxtable_size: <integer>
Default65536
Contextserver.security.per_ip
Reloadneeds a restart

Number of addresses tracked at once (bounded memory).