Hello!

On Tue, Jul 17, 2018 at 05:23:44PM -0400, jarstewa wrote:

[...]

> So, I think you seem to be suggesting that throttling /auth should not be
> necessary, and may in fact be a bad idea. But I would still like to
> understand why it isn't working as I would expect.

The explanation on why it isn't working was in the first paragraph
I wrote:

: The limit_req directive doesn't try to limit requests already
: limited, as well as subrequests within these requests. You should
: configure all limits you want to apply to a request in one place.

--
Maxim Dounin
http://mdounin.ru/
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx