Hi Francis,

Thanks very much for your reply.
It still doesn't work.
The URL I want to exclude is like
/forum.php?mod=image&aid=1289568&size=300x300&key=6831686b88a927b0d9646529f88f5052&nocache=yes&type=fixnone
Does it because there are too many parameters, the map is not working?




At 2012-07-22 04:08:20,"Francis Daly" <francis@daoine.org> wrote:
>On Sat, Jul 21, 2012 at 10:26:23AM +0800, fhal wrote:
>
>Hi there,
>
>> I tried to use map, but it doesn't work. Below is the settings.
>
>It seems to work for me, in a slightly different test:
>
>> map $arg_mod $forum_limit {
>> default $binary_remote_addr;
>> image '';
>> }
>> limit_conn_zone $forum_limit zone=addr:128m;
>> limit_req_zone $forum_limit zone=refresh:128m rate=3r/s;
>
>I use "rate=1r/m", because that makes it very easy to see that things
>are being blocked or not. But otherwise, those 6 lines are in nginx.conf.
>
>server {
> location = /file {
> limit_req zone=refresh burst=2 nodelay;
> }
>}
>
>Now test:
>
>for i in a b c d; do curl http://127.0.0.1:8000/file?mod=im; sleep 1; done
>
>gives me "file contents" 3 times, and then the 503 Service Temporarily
>Unavailable message.
>
>for i in a b c d; do curl http://127.0.0.2:8000/file?mod=im; sleep 1; done
>
>is the same, while
>
>for i in a b c d; do curl http://127.0.0.1:8000/file?mod=image; sleep 1; done
>
>gives me "file contents" 4 times. Repeat the first command, and I get
>503 4 times; repeat the last, and I get "file contents" 4 times.
>
>That looks to me like the thing is restricted by ip address to 1 request
>per minute, bursting to 2 extra; unless "mod=image" is included, in
>which case there is no restriction.
>
>Note that I haven't tested limit_conn here, just limit_req, because that
>is easier to build a test case for.
>
>Does that test work or fail for you?
>
>When I repeat the test with a fastcgi_pass configuration, instead of just
>loading a file, I see the same results.
>
>All the best,
>
> f
>--
>Francis Daly francis@daoine.org
>
>_______________________________________________
>nginx mailing list
>nginx@nginx.org
>http://mailman.nginx.org/mailman/listinfo/nginx
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx