search

xenocrat / chyrp-lite

An ultra-lightweight blogging engine, written in PHP.
https://chyrplite.net/
BSD 3-Clause "New" or "Revised" License
402 stars 42 forks source link

429 Too Many Requests You have sent too many requests in a given amount of time. #276

Open dannysale opened 5 days ago

dannysale commented 5 days ago

So I have hosting with Namecheap, and do not have problems running other blog platforms, or anything else. However, when I install Chyrp Lite, and begin enabling modules, after 3 or so cases of doing so, I get:

429 Too Many Requests You have sent too many requests in a given amount of time.

I asked Namecheap about this, and they say it's the software making the requests. Would you happen to know if this is accurate?

I've had Chyp Lite installed on other hosts in the past, and did not experience this. So, how might my current host be interacting with the software so that this could take place? Is there something I should look for in able to resolve the matter?

Your help is appreciated.

xenocrat commented 5 days ago

Hello there,

Any hosting provider can decide their own trigger for a 429 response, so there is no universal right answer to avoiding this issue. It could be that Namecheap have their hosting set on a 429 hair trigger, which you just need to be aware of and work around. Some troubleshooting thoughts:

  1. Did Namecheap give you any indication what they consider the maximum acceptable number of requests per second/minute/hour? What are the thresholds that cause their rate limiting to trigger? They may not be willing to share this with you, but it’s worth asking.
  2. What modules did you enable? Have you noticed a combination of modules that causes the issue? Any self-developed modules?
  3. 429 responses should include a Retry-After header which tells you how long you must wait before the 429 resets and requests return to being served as normal. Again, this can be any length of time the provider chooses. Good to know for troubleshooting purposes.
dannysale commented 2 days ago

All they said is they looked at the site logs and that the software was triggering beyond their threshold. It only happened when I was activating modules, and since they have been activated, I haven't seen it again. It's odd, as I've never experienced it with anything else. They said they could raise the limit on my account, but IMO that shouldn't be needed.

xenocrat commented 1 day ago

I suspected they would be unhelpfully vague about what limits were actually being breached. From what you describe, I think they might be blocking what they see as "excessive" POST requests (form submissions) as a misguided anti-abuse measure. That would mean you just need to avoid enabling modules, changing settings, or publishing blog posts "too fast."

I'm afraid I can't be much more helpful than that, due to Namecheap being super opaque and uncommunicatice to you, their paying customer.