I had a requirement of rate limiting and dynamically access controlling access to web application dynamically

  • I want to be able to rate limit access turned on / off dynamically
  • black/white list certain IP dynamically
  • certain request pattern needs to be blocked (this decision needs to be taken dynamically)

for each of these part there are solutions out there (mod_evasive for apache, nginx rate limiter, or even mature at firewall layer

however not everything is dynamic (some services needs restart)

any one has any experience around using such tool that solves these needs efficiently

last resort is to write one

  • What type of dynamic access control do you need? Does it have to do with what the user is trying to do with the app? With data inside the app? If so, then check out XACML... Feb 19, 2015 at 16:27
  • For example dynamically if I want to block all request with specific user agent, coming with specific referral header Feb 19, 2015 at 17:02

1 Answer 1


Assuming you're running a Linux system, have you considered iptables?

Basically, you could use something like:

iptables -A INPUT -p tcp -dport 80 -m limit --limit 20/second --limit-burst 50 -j ACCEPT

And use some tweaks to whitelist/blacklist. This way you won't have to restart any service. See this resource or this one, and This anwser on unix.stackexchange.com for further informations.

If you're not running linux, I'm sure pf can also do that.

  • that makes it hard to manage, i was expecting some tool with everything controlled centrally, +1 though for answering Feb 19, 2015 at 0:23

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .