Nginx 1 · Reverse proxy and TLS
Rate-limit requests
Allow 10 requests per second per client IP, with a small burst.
# in the http block
limit_req_zone $binary_remote_addr zone=perip:10m rate=10r/s;
# in a server or location block
limit_req zone=perip burst=20 nodelay;
Official Nginx 1 documentation