How to limit incoming traffic?

Question

Nginx

Pinging a websocket. The speed of a normal user is 0.5-5kb / s, 10mb / s traffic poured from a bunch of different IPs. Through tc, it turned out to limit only the total speed of all traffic. Is it possible to somehow limit the incoming speed for each connection so that each connection (not ip, but connection) can send no more than 5kb / s to the server?

Answer 1

You can try through the hashlimit module with hashlimit-mode=srcip,srcport. This parameter will help to fulfill the connection limit condition.
But, it seems to me that it is more correct to keep black and white lists on ipset.

Answer 2

Consider the Haproxy option as a frontend in front of your service, where you can write very flexible ACLs with traffic limits, number of connections, and so on.