Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Also, the cost of doing this per request is insane compared to either absorbing or rate-limiting the bandwith the requests take.

Cloud computing charges you by the request/byte/cpu cycle. Servers do not have this issue.

Also, is it simply not possible to rate limit this on a per IP basis? Make client only able to do X requests per second from each unique IP/network flow.



>Cloud computing charges you by the request/byte/cpu cycle. Servers do not have this issue.

Sure they do. Processing requests takes bandwidth, CPU, memory, disk I/O

>Also, is it simply not possible to rate limit this on a per IP basis

It's largely useless. You'll block any legitimate bits/programs, people on CGNAT, people on corporate networks & bad actors will use botnets, residential IPs, VPNs to gain access to thousands or millions of unique IPs


The overhead of handling the 403 is very very small compared to what S3 charges for a PUT.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: