All HTTP servers enforce a collection of HTTP rate-limiting to reduce abuse and achieve a high reliability. This system is built on a fork of mod_evasive<\/a>,\u00a0which implements an interval-based bean counter, in other words it begins counting URI requests for a given duration once the first request is received.<\/p>\n There are two classes of URI requests, pages in total<\/strong> und same page<\/strong> requests. Exceeding either threshold will result in an automatic 10 minute ban. Repeating the process three times in 24 hours results in an automatic 7 day ban for HTTP ports, 80 (HTTP) and 443 (HTTPS).<\/p>\n Blocked clients are returned a 403 status code (Forbidden<\/em>).<\/p>\n Pages in total (PIT) log all URL requests from an IP address in a window discussed below. If an IP address exceeds that number of requests within the window, it will be blocked automatically. If a page is image heavy as verified by webpagetest.org<\/a>, consider consolidating images into sprites<\/a> oder inlining small assets<\/a> to bypass accessory HTTP requests.<\/p>\n Same page requests are more stringent and affect requests to the same URI. This is designed to filter out brute-force attacks. If you poll a page repeatedly, such as autocomplete with a keydown event<\/a>, add a collection threshold via setTimeout<\/a> that will only poll after the typist has given a momentary repose to collect thought. For instance, a simple jQuery<\/a> implementation:<\/p>\n This assumes that the person will type at least 4 characters per second. Words per minute is standardized to 5 characters<\/a>, this it works out to be 48 WPM. You can evaluate for yourself what 48 WPM<\/a> is. To avoid triggering the same-page block, without a delay (via setTimeout), one would need to type of 96 WPM with an autocomplete AJAX callback. Feasible, but unlikely.<\/p>\n The following thresholds are in place to filter bot from human.<\/p>\n Same page<\/strong>: 4 pages in 1 second Three blocks in 24 hours results in a seven day ban. Once a ban is in place, the only way to proceed forward is to open a ticket to remove the ban.<\/p>","protected":false},"excerpt":{"rendered":" Overview All HTTP servers enforce a collection of HTTP rate-limiting to reduce abuse and achieve a high reliability. This system is built on a fork of mod_evasive,\u00a0which implements an interval-based bean counter, in other words it begins counting URI requests for a given duration once the first request is received….<\/p>","protected":false},"author":1,"comment_status":"open","ping_status":"closed","template":"","format":"standard","meta":{"footnotes":""},"ht-kb-category":[54],"ht-kb-tag":[],"class_list":["post-8839","ht_kb","type-ht_kb","status-publish","format-standard","hentry","ht_kb_category-web-content"],"_links":{"self":[{"href":"https:\/\/kb.okra.host\/de\/wp-json\/wp\/v2\/ht-kb\/8839","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kb.okra.host\/de\/wp-json\/wp\/v2\/ht-kb"}],"about":[{"href":"https:\/\/kb.okra.host\/de\/wp-json\/wp\/v2\/types\/ht_kb"}],"author":[{"embeddable":true,"href":"https:\/\/kb.okra.host\/de\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kb.okra.host\/de\/wp-json\/wp\/v2\/comments?post=8839"}],"version-history":[{"count":1,"href":"https:\/\/kb.okra.host\/de\/wp-json\/wp\/v2\/ht-kb\/8839\/revisions"}],"predecessor-version":[{"id":8840,"href":"https:\/\/kb.okra.host\/de\/wp-json\/wp\/v2\/ht-kb\/8839\/revisions\/8840"}],"wp:attachment":[{"href":"https:\/\/kb.okra.host\/de\/wp-json\/wp\/v2\/media?parent=8839"}],"wp:term":[{"taxonomy":"ht_kb_category","embeddable":true,"href":"https:\/\/kb.okra.host\/de\/wp-json\/wp\/v2\/ht-kb-category?post=8839"},{"taxonomy":"ht_kb_tag","embeddable":true,"href":"https:\/\/kb.okra.host\/de\/wp-json\/wp\/v2\/ht-kb-tag?post=8839"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}Pages in total<\/h2>\n
Same page<\/h2>\n
$(\"#input\").on('keydown', function() {\r\n var timer;\r\n timer = setTimeout(function() {\r\n cancelTimeout(timer);\r\n \/\/ cancel other async events\r\n \/\/ do autocomplete AJAX callback\r\n }, 250 \/** 250 milliseconds *\/);\r\n});<\/code><\/pre>\nBlocking criteria<\/h2>\n
\nPages in total<\/strong>: 150 pages in 3 seconds<\/p>\n