20 lines
773 B
Go
20 lines
773 B
Go
package limiter
|
|
|
|
import (
|
|
"time"
|
|
|
|
"golang.org/x/time/rate"
|
|
)
|
|
|
|
const (
|
|
DefaultAuthInterval = time.Second * 15 // average authentication errors per second
|
|
DefaultAuthLimit = 100 // authentication error burst rate limit
|
|
DefaultLoginInterval = time.Minute // average failed logins per second
|
|
DefaultLoginLimit = 10 // failed logins burst rate limit
|
|
)
|
|
|
|
// Auth limits the number of authentication errors from a single IP per time interval (every 15 seconds by default).
|
|
var Auth = NewLimit(rate.Every(DefaultAuthInterval), DefaultAuthLimit)
|
|
|
|
// Login limits the number of failed login attempts from a single IP per time interval (one per minute by default).
|
|
var Login = NewLimit(rate.Every(DefaultLoginInterval), DefaultLoginLimit)
|