[squid-users] Rate limiting bad clients?

[Dan Charlesworth]

Hi all,

This is more of a squid-adjacent query. Hopefully relevant enough for someone here to help…

I’m sick of all these web apps that take it upon themselves to hammer proxies when they don’t get the response they want, like if they have to authenticate for example. On big networks, behind a forward proxy, there’s always a few computers with some software doing dozens of identical, failing, requests per second.

- What’s a good approach for rate limiting the clients computers which are doing this?
- Can anyone point to a good tutorial for this using, say, iptables if that’s appropriate?

Any advice welcome.

Thanks!
Dan