1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
|
package handlers
import (
"net/http"
"gitlab.com/gitlab-org/gitlab-pages/internal/config"
"gitlab.com/gitlab-org/gitlab-pages/internal/ratelimiter"
"gitlab.com/gitlab-org/gitlab-pages/internal/request"
"gitlab.com/gitlab-org/gitlab-pages/metrics"
)
// Ratelimiter configures the ratelimiter middleware
// TODO: make this unexported once https://gitlab.com/gitlab-org/gitlab-pages/-/issues/670 is done
func Ratelimiter(handler http.Handler, config *config.RateLimit) http.Handler {
sourceIPLimiter := ratelimiter.New(
"http_requests_by_source_ip",
ratelimiter.WithCacheMaxSize(ratelimiter.DefaultSourceIPCacheSize),
ratelimiter.WithCachedEntriesMetric(metrics.RateLimitCachedEntries),
ratelimiter.WithCachedRequestsMetric(metrics.RateLimitCacheRequests),
ratelimiter.WithBlockedCountMetric(metrics.RateLimitBlockedCount),
ratelimiter.WithLimitPerSecond(config.SourceIPLimitPerSecond),
ratelimiter.WithBurstSize(config.SourceIPBurst),
)
handler = sourceIPLimiter.Middleware(handler)
domainLimiter := ratelimiter.New(
"http_requests_by_domain",
ratelimiter.WithCacheMaxSize(ratelimiter.DefaultDomainCacheSize),
ratelimiter.WithKeyFunc(request.GetHostWithoutPort),
ratelimiter.WithCachedEntriesMetric(metrics.RateLimitCachedEntries),
ratelimiter.WithCachedRequestsMetric(metrics.RateLimitCacheRequests),
ratelimiter.WithBlockedCountMetric(metrics.RateLimitBlockedCount),
ratelimiter.WithLimitPerSecond(config.DomainLimitPerSecond),
ratelimiter.WithBurstSize(config.DomainBurst),
)
return domainLimiter.Middleware(handler)
}
|
