Rate limiting: Firewall rate limits and the rate-limit traffic rule

Ngris offers two complementary ways to rate-limit traffic.

Firewall rate limits

The Firewall Rate Limits page (under Firewall → Rate Limits) provides per-endpoint rate limiting with IP-specific rules. A rule has:

• Name — a descriptive label.
• Endpoint — the target endpoint.
• Source IPs — IP addresses or CIDR ranges (IPv4/IPv6).
• Requests per Window — the maximum allowed, from 1 to 1,000,000.
• Window Size — 1 min, 5 min, 15 min, 1 hour, 6 hours, 12 hours, 1 day, 7 days, or 30 days.
• Action — block or throttle.
• Priority — evaluation order, 0 to 999.

The Rate Limit traffic rule

Separately, the per-endpoint Rate Limit traffic-policy rule limits requests per time window to protect your backend from abuse. It takes a limit (max requests in the window, must be greater than 0), a window in seconds, a scope of either ip (per-client) or endpoint (global), and an optional custom message.