Knowledge Base
medianova.comSupportLog in
  • Welcome to the Medianova Knowledge Base
  • Getting Started
    • Concepts
    • Start your Free Trial
  • Products
    • Security
      • DDoS Protection
      • SSL/TLS Encryption
        • How to upload and manage SSL Certificates?
        • How to Extract CRT and KEY Files from a PFX Certificate
        • How can I use Free SSL?
        • FAQ
      • Web Application Firewall (WAF)
        • How to activate WAF?
        • Analytics
      • Rate Limiting
      • Hotlink Protection
      • IP Restriction
      • Geoblocking
      • FAQs
    • Performance / CDN
      • Static Content Delivery
        • Create Small Resource
        • Create Large Resource
        • Integrating Static CDN Resource
        • Configuration Basics
          • Medianova IP Blocks
        • Advanced Configuration
          • Origin Settings
            • Advanced Origin Settings
            • Rewrite Origin URLs
            • Origin SNI Request
            • Redirect Handle From Origin
            • Origin Response Timeout
          • CNAME
          • Caching
            • Edge Cache Expiration
            • Browser Cache Rule
            • Query String Caching
            • Etag Verification
            • Error Status Code Cache Expiration
            • Shared Cache
            • Stale Cache
            • Robots.txt file
            • Range Based Caching
          • Headers
            • CORS Header
            • Custom Header
            • X-CDN Header
            • Origin Host Header
            • HTTP Strict Transport (HSTS) Protection
            • X-Frame Options
            • X-XSS Protection
            • X-Content Type Options
          • Purge
          • Prefetch
          • Page Rules
            • Manage Page Rules
            • Page Rules Settings
          • Compression
            • How to Configure Gzip and Brotli
        • Website Framework Integrations
          • Magento CDN Integration
          • Wordpress CDN Integration
          • Phalcon CDN Integration
          • CakePHP CDN Integration
        • Analytics
      • Dynamic Content Acceleration
        • Create Dynamic Resource
        • Integrating Dynamic CDN Resource
        • Aksela Test Steps
        • Advanced Configuration
          • Origin Settings
            • Advanced Origin Settings
            • Rewrite Origin URLs
            • Origin SNI Request
            • Redirect Handle From Origin
            • Origin Response Timeout
          • Caching
            • Edge Cache Expiration
            • Browser Cache Rule
            • Query String Caching
            • Etag Verification
            • Error Status Code Cache Expiration
            • Shared Cache
            • Stale Cache
            • Disallow Cookie Base Cache
            • Cookie Base Cache
            • Header Base Cache
            • Header Value Base Cache
            • MNUID Cookie Base Cache
            • Mobile Redirect
          • Headers
            • CORS Header
            • Custom Header
            • X-CDN Header
            • Origin Host Header
            • HTTP Strict Transport (HSTS) Protection
            • X-Frame Options
            • X-XSS Protection
            • X-Content Type Options
          • Purge
          • Prefetch
          • Page Rules
          • Compression
        • Analytics
      • Streaming Content Delivery
        • Create Streaming Resource
        • Advanced Configuration
          • Origin Settings
            • Redirect Handle From Origin
            • Origin Response Timeout
          • Headers
            • CORS Header
            • Custom Header
            • X-CDN Header
            • Origin Host Header
          • Stream Management
        • Analytics
      • API Caching
      • Private CDN
      • Image Optimization and WebP
        • What is Image Optimization and How Does It Work?
        • What is WebP and How Does It Work?
        • How to Activate Image Optimization and WebP?
        • Analytics
      • FAQs
    • Object Storage / Stook
      • What is Stook?
      • How to Create Stook?
      • How to Connect Bucket?
      • Access Key Management
      • Stook Integration and Usage Guides
        • Migrating Data to Stook Using Rclone
        • Data Transfer to Stook with Cyberduck
        • How to use the AWS SDK for Laravel with Stook?
        • How to use the AWS SDK for PHP with Stook?
        • How do I use the AWS SDK for .NET with Stook?
        • Stook Storage User Guide for AWS CLI
        • How to use AWS SDK for JavaScript with Stook?
        • How do I use Stook with the AWS Java SDK?
        • Using Pre-Signed URL PHP with Stook
        • Using Pre-Marked URL NODEJS With Stook
    • Analytics (MN Logz)
      • Real-Time Logpush
      • Raw Logs
  • Account & Billing
    • Managing Account and Organizations
      • Create new organization
      • Invite user
      • Changing Cloud Panel password
      • Access Controls and Authentication
    • Subscription and Billing
      • Packages
        • Free Trial
        • Starter
        • Growth
        • Enterprise
        • Add-ons
      • Policy
      • Upgrade & Downgrade Procedures
      • Changing your subscription package
      • Payment Info
      • Invoices
  • API Documentation
    • Authentication
    • Security
      • Web Application Firewall (WAF)
      • SSL/TLS
      • Always Use HTTPS Settings
      • Origin Basic Authentication
      • Secure Token
      • Bot Protection
      • Hotlink Protection
      • User Agent ACL
      • IP Restriction ACL
      • Geoblocking
    • Performance / CDN
      • Resources
      • Origin Settings
      • CNAME & SSL
      • Caching
      • Headers
      • Image Optimization & WebP
      • Page Rule
      • Purge
      • Prefetch
      • Stream Management
    • Object Storage / Stook
    • Analytics
      • WAF Analytics
  • Support and Troubleshooting
    • Common Issues and Solutions
      • Troubleshooting Common Setup Issues
      • Troubleshooting Performance Problems
    • Contacting Customer Support
  • Glossary
    • Definition of Important CDN Terms
    • Acronyms and Abbreviations
    • Definition of HTTP Status Error Codes
Powered by GitBook
LogoLogo

© 2025 Medianova. All rights reserved.

On this page
  • Key Features
  • How to Configure Rate Limiting

Was this helpful?

Export as PDF
  1. Products
  2. Security

Rate Limiting

The Rate Limiting feature in the Medianova Cloud Panel provides a robust mechanism to control incoming traffic volume, protect your resources from abuse, and optimize overall system performance. By defining request limits and actions, you can effectively manage excessive requests, ensure fair usage, and maintain stability for your CDN services.

Rate Limiting allows you to restrict the number of requests made to your CDN resource within a specified time window (seconds or minutes). It is particularly useful for:

  • Preventing abuse: Protect resources from malicious traffic or bots.

  • Traffic optimization: Ensure fair access by limiting excessive requests from individual clients.

  • Resource protection: Reduce the load on your origin servers and avoid unnecessary bandwidth consumption.

The feature also supports additional actions, IP whitelisting, and configurable HTTP status codes to manage traffic behavior efficiently.

Key Features

  1. Customizable Request Limits

    • Define the number of requests allowed within a time window:

      • Seconds: Fine-tune request limits for short intervals.

      • Minutes: Broader control for longer time windows.

  2. Rate Limit Options

    • Configure the behavior of rate limits:

      • Burst + No Delay: Allows an initial burst of requests without any delays, ensuring immediate responsiveness.

      • Burst: Allows a burst of requests but applies delays or throttling once the threshold is exceeded.

      • None: Disables burst handling and enforces a strict limit.

  3. IP Whitelisting

    • Enable the Whitelist IP Status to exclude specific IP addresses from Rate Limiting rules. This is useful for trusted clients or internal testing purposes.

  4. Configurable HTTP Status Codes

    • Choose the response status code when the rate limit is exceeded:

      • 429 Too Many Requests: Indicates the client has sent too many requests within the time window.

      • 529 Site Overloaded: Used when the server is unable to process requests due to excessive load.

  5. Action Management (Dynamic CDN Only)

    • Define actions for excessive requests:

      • Block: Reject requests that exceed the rate limit.

      • Challenge: Present a challenge (e.g., CAPTCHA) to validate whether the client is legitimate.

How to Configure Rate Limiting

Follow these steps to configure Rate Limiting for your CDN resources in the Medianova Cloud Panel:

  1. Access the Configuration

    • Log in to the Medianova Cloud Panel.

    • Click on the CDN Resources section in the left-hand menu.

    • Select the relevant resource you want to configure.

    • Navigate to the Security tab.

    • Scroll down to the Rate Limiting section.

  2. Enable Rate Limiting

    • Locate the Status option.

    • Toggle the Status to On to activate the Rate Limiting feature.

  3. Set Request Limits

    • Under the Request Limit section:

      • Specify the maximum number of requests allowed per second or minute.

      • Adjust these values based on your traffic volume and server capacity.

  4. Configure Rate Limit Options

    • Select a Rate Limit Option from the following:

      • Burst + No Delay: Allows a temporary spike in requests with no initial delay.

      • Burst: Allows a burst of requests but applies throttling afterward.

      • None: Disables burst handling, enforcing a strict rate limit.

    • If Burst or Burst + No Delay is selected, enter a Burst Value to define the threshold for the burst limit.

  5. Whitelist IPs (Optional)

    • To exclude specific IP addresses from Rate Limiting:

      • Toggle the Whitelist IP Status to On.

      • Add the trusted IP addresses to the whitelist.

    • This ensures that trusted clients or internal traffic are not affected by rate limits.

  6. Set Status Codes

    • Choose the HTTP status code to be returned when the rate limit is exceeded:

      • 429 Too Many Requests

      • 529 Site Overloaded

  7. Define Actions (Dynamic CDN Only)

    • Under the Actions section, select one of the following options:

      • Block: Deny requests that exceed the rate limit.

      • Challenge: Present a challenge (e.g., CAPTCHA) to validate the request.

  8. Save Your Configuration

    • Click the Submit button to save your changes.

    • The Rate Limiting rules will now be applied to your selected resource.

Last updated 4 months ago

Was this helpful?