Request Rate Shaping
Individual users may dominate the use of a service, to the detriment of other users of theservice. A back-end application infrastructure may have limited scalability, being easilyoverwhelmed when too many requests are given to it. You may wish to restrict the rate atwhich certain activities can occur, such as sending an email, or logging in to a service, aspart of a wider security policy.
Request Rate Shaping allows you to specify limits on a wide range of events, with very finegrained control over how events are identified. You can impose per-second and per-minute rates on these events.
Examples
- You can rate-shape individual web spiders, to stop them overwhelming your web site. Each web spider, from each remote IP address, can be given maximum request rates.
- You can throttle individual SMTP connections, or groups of connections from the same client, so that each connection is limited to a maximum number of sent emails per minute.
- You may also rate-shape new SMTP connections, so that a remote client can only establish new connections at a particular rate.
- You can apply a global rate shape to the number of connections per second that are forwarded to an application.
- You can identify individual useru2019s attempts to log in to a service, and then impede any dictionary-based login attacks by restricting each user to a limited number of attempts per minute.
More Information
The white paper Traffic Valuation and Prioritization describes how to draw together Request Rate Shaping, along with the other capabilities of ZXTM, to implement custom service policies, valuing and measuring your traffic, and prioritizing requests when required. Read more
© Zeus Technology Ltd