Cloudflare Rate Limiting just became FREE UNMETERED!
Yup, just like their unmetered DDoS protection!
Number of rules included for free on each CF plan
What is this?
With rate limiting you can limit each IP for X requests per X time for X resource - for example limit registration/form to decrease spam or limit search function in your forum to defend from attack/cpu overload.
What does unmetered mean in this case?
Cloudflare wont bill you for usage on these free unmetered filters. Previously it was $5 per 1mil requests.
Want even more rules for free?
You can bind CF-Connecting-IP as real IP in nginx on your own server and apply rules there!
So why would you even want to use CF Rate Limit if you can have like 100 rules in nginx for free already?
Because it will offload rate limiting to CF, extra requests wont hit your server.
I recommend the best of two worlds - offload most abused functions to CF, add more rarely abused functions to nginx. That way you'll get best free & powerful rate limit which can defend you from many attacks and abusers.
Share your ideas - how you will use rate limiting?