m13253 / dns-over-https

High performance DNS over HTTPS client & server
https://developers.google.com/speed/public-dns/docs/dns-over-https
MIT License
1.96k stars 221 forks source link

Feature Request: Rate Limiting #149

Closed ztheory closed 12 months ago

ztheory commented 1 year ago

It'd be nice to have built-in rate limiting. Specifically, requests per second from a specific source IP.

m13253 commented 1 year ago

I’m a little bit confused because should we do it on Nginx side?

ztheory commented 1 year ago

Server is set to listen on the port directly with no proxy in front of it.

m13253 commented 1 year ago

I recommend a reverse proxy to perform OCSP stapling. Please refer to the documentations for configuration guidelines.