Rate Limiter (module jrThrottle) limits how many requests one IP address can make in 5 seconds. Requests over the limit get a 429 Too Many Requests answer. An address that keeps going over the limit is blocked through Banned Items. Admins are never blocked.
It protects the site from scrapers and badly behaved bots. It needs Redis Cache.
ACP > Modules > Tools > Rate Limiter
| Setting | What it does |
|---|---|
| Max Visitor Requests | Requests allowed in 5 seconds from one IP, for visitors who aren't signed in (default: no limit) |
| Max User Requests | The same, for signed-in users (default: no limit) |
Keep the limits generous: one page load can make many requests, for its images, styles and scripts.