[
SECURITY · RATE LIMITING]
Fair traffic.Protected origins.
Control how fast clients can hit your CDN resources - enforced continuously at the edge for Dynamic CDN Resources.
WHY IT MATTERS
Regulate request rates.
Essential against DDoS floods, brute force login attempts and web scraping.
Protect origins and APIs
Stop excessive traffic from overwhelming servers or consuming compute and database resources.
Edge enforcement
Limits apply at the CDN before requests reach your infrastructure.
Continuous evaluation
A limit such as 100 requests per minute is spread over time - not a bucket that resets all at once.
KEY FEATURES
Flexible limits and bursts.
Per second or per minute
Set request rates that match each workload.
Burst control
Choose None, Burst with delay, or Burst + No Delay when short spikes above the rate are expected.
IP whitelisting
Exclude trusted networks from enforcement.
Path and extension rules
Apply different limits to `/login`, `/api/`, `.pdf` and other paths through Page Rules.
Configurable actions
Pick how exceeded requests are handled and which HTTP code is returned.
Geolocation aware
CDN providers can tie limits to regions - useful against traffic from known attack sources.
USE CASES
Built for sensitive endpoints.
API protection
Control high-frequency API calls that would otherwise hammer your origin.
Login and authentication
Throttle brute force attempts by limiting login attempts over time.
Traffic spike management
Tolerate campaign spikes with burst settings while keeping a baseline cap.
Bot and scraper control
Reduce automated clients that fire requests as fast as they can.
CUSTOMER USE CASE
Rate Limiting under DDoS pressure
“A top-ten newspaper in Turkey with heavy online readership faced frequent DDoS attacks. Medianova Rate Limiting blocked excessive traffic from attacking IP addresses at the edge - 2,422,589 malicious requests within minutes - with no downtime or origin performance loss.”GET STARTED
Tune from moderate limits.
Start with rates close to normal traffic, then tighten based on Edgesight and logs.
- 01 / 03
Open Security
Choose your Dynamic CDN Resource in the Control Panel.
- 02 / 03
Set Rate Limiting
Define the request rate, burst mode and actions for exceeded traffic.
- 03 / 03
Add Page Rules if needed
Apply stricter limits to login, API or download paths.
Stop floods before they reach your stack.
Talk to an engineer about login paths, APIs and burst tolerance.
Talk to an engineer