Home

Welcome to the rate-limiter-flexible wiki!

Promisified rate limiter, brute-force and DDoS protection suitable for distributed high traffic node.js applications.

Get started

• Options list
• API methods

Middlewares and plugins

• Express middleware
• Koa middleware
• Hapi plugin

Migration from other packages

• ExpressBrute
• limiter

Limiters:

• Valkey Glide
• IoValkey
• Redis
• Memory
• DynamoDB
• Etcd
• Prisma
• MongoDB (with sharding support)
• Postgres
• MySQL
• SQLite
• Cluster
• PM2 Cluster
• BurstyRateLimiter
• Memcached
• RateLimiterUnion
• RateLimiterQueue

Wrappers:

• RLWrapperBlackAndWhite Black and White lists

Knowledge base:

• In-memory Block Strategy
• Insurance Strategy
• Comparative benchmarks
• Smooth out traffic peaks
• Consume points evenly
• Usage example
  • Minimal protection against password brute-force
  • Login endpoint protection
  • Websocket connection prevent flooding
  • Dynamic block duration
  • Different limits for authorized users
  • Different limits for different parts of application
  • Block Strategy in memory against massive DDoS
  • Insurance Strategy
  • Third-party API, crawler, bot rate limiting