I have a service running on nginx however it is behind CloudFlare. I would like to rate limit requests that get sent to the php5-fpm backend. I do not want to rate limit CloudFlare rather I want to rate limit requests based on an IP Address from the cf forwarded for header. I do not want traffic from obvious flood sources hitting php5-fpm. I'd like to conserve those resources for real users. What would be the best way to accomplish this task?

closed as off-topic by Steffen Ullrich, techraf, Julian Knight, John Deters, Stephane Oct 3 '16 at 7:27

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "This question does not appear to be about Information security within the scope defined in the help center." – Steffen Ullrich, techraf, John Deters
If this question can be reworded to fit the rules in the help center, please edit the question.

  • Hi, this isn't really a question about Information Security. I recommend you ask it on Stack Overflow. Good question though. – Julian Knight Oct 2 '16 at 22:02

Browse other questions tagged or ask your own question.