Author: Khoi Tran

Package: RateLimit.Framwork

• The lightweight package provides a middleware service to protect your application by limiting the request rate.
• Suport old .NET Framework project
• Support three way caching: Redis, MemoryCache, System.Web.Caching.Cache
• How it work: If an IpAddress (can be config using with CookieName) contains the number of requests which cross over the MaxRequestPerPeriod, it will be blocked by returning a TooManyRequest(429) (config by BlockMessage) within the blocking time (config by BlockTimeSecond)

Usage

• ExampleController.cs: config RateLimitAttribute for GetReport action

using Newtonsoft.Json; using System.Web.Mvc; using RateLimit; // use RateLimit package namespace WebMVC.Controllers { public class ExampleController : Controller { /* Config for every request come to this action */ [RateLimit(PeriodTime = 10, MaxRequestPerPeriod = 1, BlockTime = 10, BlockMessage = "You are making too many request")] public string GetReport(string param1) { return param1; } } }

Advance

• Global.asax.cs: custom regis global RateLimit configuration

/// ... using RateLimit; // use RateLimit package using RateLimit.Configs; // use RateLimit package configuration namespace WebMVC { public class MvcApplication : System.Web.HttpApplication { protected void Application_Start() { /// ... /// ... /* Full global config */ RateLimitContext.RegisterConfig( new RateLimitConfig( /* Global config for request rate */ rateConfig: new RequestRateConfig { BlockMessage = "You are making too many request, please try after 60 second", BlockTime = 60, CookieName = "ASP.NET_SessionId", MaxRequestPerPeriod = 1, PeriodTime = 10 }, /* Cache config, default is new HttpRuntimeConfig() */ cacheConfig: new RedisConfig() { CacheTimeSecond = 3600, ConnectTimeoutSecond = 5, DatabaseIndex = 0, EndPoints = "localhost:6379" } ) ); } } }