Home

Welcome to the rate-limiter-flexible wiki!

Promisified rate limiter, brute-force and DDoS protection suitable for distributed high traffic node.js applications.

Get started

• Options list
• API methods

Middlewares and plugins

• Express middleware
• Koa middleware
• Hapi plugin

Migration from other packages

• ExpressBrute
• limiter

Limiters:

• Cluster
• Drizzle
• DynamoDB
• Etcd
• Memcached
• Memory
• MongoDB (with sharding support)
• MySQL
• PM2 Cluster
• PostgreSQL
• Prisma
• Redis
• SQLite
• Valkey: iovalkey and Valkey Glide
• BurstyRateLimiter
• RateLimiterUnion
• RateLimiterQueue

Wrappers:

• AWS SDK v3 Client Rate Limiter Prevent punishing rate limit.
• RLWrapperBlackAndWhite Black and White lists
• RLWrapperTimeouts Custom timeouts

Knowledge base:

• In-memory Block Strategy
• Insurance Strategy
• Periodic sync to reduce number of requests
• Usage example
  • Minimal protection against password brute-force
  • Login endpoint protection
  • Websocket connection prevent flooding
  • Dynamic block duration
  • Different limits for authorized users
  • Different limits for different parts of application
  • Block Strategy in memory against massive DDoS
  • Insurance Strategy
  • Third-party API, crawler, bot rate limiting