NGiNX to prevent DDoS

Hello Folks

i got setup where nginx acts as reverse proxy for 3 apache backends.
yesterday we had the case that some kind of bot or spider started
attacking one domain which gets through nginx.

is there any possibility to configure nginx for something like “rate
limiting” or should i better go with iptables? the hardware is strong
enaugh to take this (quadcore xeons).




look at the modules HttpLimitReq and HttpLimitZone

++ jerome

2009/9/16 Juergen G. [email protected]:

This might also provide additional info:

Thanks to all of you :slight_smile:


thanks for this link, the samples are great

Nuno Magalhães wrote:

This might also provide additional info:
Nginx Secure SSL Web Server @

InterNetX GmbH
Maximilianstrasse 6
D-93047 Regensburg

Tel. +49 941 59559-480
Fax +49 941 59559-245

Geschäftsführer/CEO: Thomas Mörz
Amtsgericht Regensburg, HRB 7142