limit_req_zone and limit_req in Nginx - Practice Problems & Coding Challenges

Challenge - 5 Problems

💻 Command Output

intermediate

What is the effect of this limit_req_zone directive?

Given the configuration snippet:

limit_req_zone $binary_remote_addr zone=mylimit:10m rate=5r/s;

What does this directive do in NGINX?

Nginx

limit_req_zone $binary_remote_addr zone=mylimit:10m rate=5r/s;

A It allows unlimited requests but logs client IPs in a 10MB zone named 'mylimit'.

B It limits total server requests to 5 per second, using 10MB memory for buffering.

C It blocks any client IP that sends more than 5 requests in total, using 10MB disk space.

D It limits requests to 5 requests per second per unique client IP, storing state in a 10MB shared memory zone named 'mylimit'.

💡 Hint

Think about what $binary_remote_addr and rate=5r/s mean in this context.

The limit_req_zone directive defines a shared memory zone to track request rates per key. Here, $binary_remote_addr means the client IP is used as the key. The zone named 'mylimit' uses 10MB memory to store states. The rate=5r/s limits each client IP to 5 requests per second.

💻 Command Output

intermediate

What happens when this limit_req is applied?

Given this snippet inside a server block:

limit_req zone=mylimit burst=10 nodelay;

What is the behavior of NGINX when requests exceed the rate defined in the zone?

Nginx

limit_req zone=mylimit burst=10 nodelay;

A NGINX queues requests indefinitely until the rate drops below the limit.

B NGINX allows up to 10 extra requests to queue immediately without delay, then rejects further requests with 503 error.

C NGINX rejects any request exceeding the rate immediately without queuing.

D NGINX delays all requests by 10 seconds before processing them.

💡 Hint

Consider what 'burst' and 'nodelay' mean for request handling.

The burst=10 allows up to 10 requests to exceed the rate limit temporarily by queuing them. The nodelay option means these burst requests are processed immediately without delay. Requests beyond this burst are rejected with a 503 error.

❓ Troubleshoot

advanced

Why does this NGINX config cause a syntax error?

Identify the cause of the syntax error in this configuration:

limit_req_zone $remote_addr zone=one:10m rate=1r/s
limit_req zone=one burst=5;

Nginx

limit_req_zone $remote_addr zone=one:10m rate=1r/s;
limit_req zone=one burst=5;

A Missing semicolon at the end of the first line causes syntax error.

B Using $remote_addr instead of $binary_remote_addr is invalid in limit_req_zone.

C The zone name 'one' is too short and invalid.

D The burst parameter cannot be used without nodelay.

💡 Hint

Check punctuation at the end of each directive line.

NGINX requires each directive to end with a semicolon. The first line is missing a semicolon, causing a syntax error.

✅ Best Practice

advanced

Which is the best way to avoid blocking legitimate users with limit_req?

You want to limit request rates but avoid blocking users who occasionally send bursts of requests. Which configuration is best?

A Use limit_req with a burst value and no nodelay to allow queued requests to be delayed.

B Use limit_req_zone with a very low rate and no burst to strictly block excess.

C Use limit_req with burst=0 to reject all excess requests immediately.

D Disable limit_req and rely on firewall rules instead.

💡 Hint

Think about how burst and nodelay affect request queuing and delays.

Setting a burst with no nodelay queues excess requests and delays them instead of rejecting immediately. This helps avoid blocking users who send occasional bursts.

🔀 Workflow

expert

Order the steps to configure rate limiting with limit_req_zone and limit_req

Put these steps in the correct order to implement rate limiting in NGINX using limit_req_zone and limit_req.

A 1,3,2,4

B 2,1,3,4

C 1,2,3,4

D 2,3,1,4

💡 Hint

Think about defining the zone before using it, then applying and testing.

First, define the shared memory zone with limit_req_zone. Then apply limit_req in server or location block. Reload NGINX to apply changes. Finally, test the setup.