I have a service running on nginx however it is behind CloudFlare. I would like to rate limit requests that get sent to the php5-fpm backend. I do not want to rate limit CloudFlare rather I want to rate limit requests based on an IP Address from the cf forwarded for header. I do not want traffic from obvious flood sources hitting php5-fpm. I'd like to conserve those resources for real users. What would be the best way to accomplish this task?
closed as off-topic by Steffen Ullrich, techraf, Julian Knight, John Deters, Stephane Oct 3 '16 at 7:27
This question appears to be off-topic. The users who voted to close gave this specific reason:
- "This question does not appear to be about Information security within the scope defined in the help center." – Steffen Ullrich, techraf, John Deters