Welcome! Log In Create A New Profile

Advanced

Limiting number of client TLS connections

Zero King
November 18, 2023 01:46AM
Hi all,

I want Nginx to limit the rate of new TLS connections and the total (or
per-worker) number of all client-facing connections, so that under a
sudden surge of requests, existing connections can get enough share of
CPU to be served properly, while excessive connections are rejected and
retried against other servers in the cluster.

I am running Nginx on a managed Kubernetes cluster, so tuning kernel
parameters or configuring layer 4 firewall is not an option.

To serve existing connections well, worker_connections can not be used,
because it also affects connections with proxied servers.

Is there a way to implement these measures in Nginx configuration?
_______________________________________________
nginx mailing list
nginx@nginx.org
https://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

Limiting number of client TLS connections

Zero King November 18, 2023 01:46AM

Re: Limiting number of client TLS connections

Maxim Dounin November 18, 2023 07:12PM

Re: Limiting number of client TLS connections

Zero King November 20, 2023 10:30AM

Re: Limiting number of client TLS connections

Maxim Dounin November 21, 2023 03:18PM

RE: Limiting number of client TLS connections

Reinis Rozitis November 19, 2023 04:04PM

Re: Limiting number of client TLS connections

J Carter November 19, 2023 09:34PM

Re: Limiting number of client TLS connections

Zero King November 25, 2023 03:04AM

Re: Limiting number of client TLS connections

J Carter November 25, 2023 05:56PM

Re: Limiting number of client TLS connections

J Carter December 08, 2023 03:40PM

Re: Limiting number of client TLS connections

Zero King March 30, 2024 03:36AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 201
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready