Rate Limiter

Version 1.4.0b1: - New: Logged in users are recognized from their session when the visitor limit is reached (read only - no session is started), so "Max User Requests" applies to them - Change: Master and Admin users are not rate limited - Change: System Check reports a problem when Redis is not active or cannot be reached, instead of asking for APCu (no longer used) - Change: Activity Log entries show the limit as requests per 5 seconds - Change: IPv6 addresses are counted per /64 network - Change: Requests the rate limiter does not count (webhooks, uploads, image requests, URL scan players) are matched on the module view in the URL instead of a string anywhere in the URL - Bug Fix: "Max User Requests" was never applied - logged in users were rate limited at the visitor limit - Bug Fix: A limit of N requests every 5 seconds allowed only N-1 requests - Bug Fix: The Redis keys used to log a rate limited IP address once a minute never expired - Bug Fix: The Jamroom Core minimum version requirement was not checked - Developer: "throttled" event fired when a request is over the rate limit - a listener can let the request through by setting "throttle" to false Version 1.3.0: - New: Rebuilt tracking to use Redis for access counting and caching - Change: Rate Limiter module now requires Redis - Change: "Client IP Tracking" global config option removed - no longer used - Change: "Max Requests Override" global config option removed - no longer used Version 1.2.0: - New: "Max User Requests" setting to set max request rate for logged in users - New: "Max Requests Override" setting to override specific IP4 addresses or ranges - Change: "Max Requests" setting changed to "Max Visitor Requests" Version 1.1.4: - Change: Updated to prevent throttling of requests from cluster worker processes Version 1.1.3: - Change: Updated Client IP Browser to prevent banning of private IP addresses Version 1.1.2: - Change: Update to no longer throttle master or admin users Version 1.1.1: - Change: Updated to no longer count browser requests to "favicon.ico" as a request Version 1.1.0: - Change: Updated with new cache key prefixes to work with local caching in Core 6.5.0+ Version 1.0.2: - New: Updated help and config options for Max Requests Version 1.0.1: - New: "Client IP Tracking" global config option to track hit counts by Client IP - New: Client IP Address browser tool added to browser access by Client IP - New: "rate_limited" event added that is triggered when a client IP is rate limited Version 1.0.0: - Initial Release