使用了AspNetCoreRateLimit三方库,starup.cs配置如下。
using AspNetCoreRateLimit; using Microsoft.AspNetCore.Builder; using Microsoft.AspNetCore.Hosting; using Microsoft.AspNetCore.Http; using Microsoft.Extensions.Configuration; using Microsoft.Extensions.DependencyInjection; using Microsoft.Extensions.Hosting; using Microsoft.OpenApi.Models; namespace RateLimitDemo01 { public class Startup { public Startup(IConfiguration configuration) { Configuration = configuration; } public IConfiguration Configuration { get; } public void ConfigureServices(IServiceCollection services) { // needed to load configuration from appsettings.json services.AddOptions(); // needed to store rate limit counters and ip rules services.AddMemoryCache(); //load general configuration from appsettings.json services.Configure<IpRateLimitOptions>(Configuration.GetSection("IpRateLimiting")); //load ip rules from appsettings.json services.Configure<IpRateLimitPolicies>(Configuration.GetSection("IpRateLimitPolicies")); // inject counter and rules stores services.AddSingleton<IIpPolicyStore, MemoryCacheIpPolicyStore>(); services.AddSingleton<IRateLimitCounterStore, MemoryCacheRateLimitCounterStore>(); // the IHttpContextAccessor service is not registered by default. // the clientId/clientIp resolvers use it. services.AddSingleton<IHttpContextAccessor, HttpContextAccessor>(); // configuration (resolvers, counter key builders) services.AddSingleton<IRateLimitConfiguration, RateLimitConfiguration>(); services.AddControllers(); services.AddSwaggerGen(c => { c.SwaggerDoc("v1", new OpenApiInfo { Title = "RateLimitDemo01", Version = "v1" }); }); } public void Configure(IApplicationBuilder app, IWebHostEnvironment env) { if (env.IsDevelopment()) { app.UseDeveloperExceptionPage(); app.UseSwagger(); app.UseSwaggerUI(c => c.SwaggerEndpoint("/swagger/v1/swagger.json", "RateLimitDemo01 v1")); } app.UseIpRateLimiting(); app.UseHttpsRedirection(); app.UseRouting(); app.UseAuthorization(); app.UseEndpoints(endpoints => { endpoints.MapControllers(); }); } } }
客户端用了五组请求:None白名单 ,无限制,WhiteIP1限流1秒2次请求 ,WhiteIP2限流,因为每秒一次请求,所以分在一分钟五次的限流组中,ClientID001允许的客户ID,ClientID002不允许的客户端ID。
using System; using System.Net.Http; using System.Threading.Tasks; namespace RateLimitDemo01_Client { class Program { static async Task Main(string[] args) { Console.WriteLine(""); Console.WriteLine("回车开始:"); Console.ReadLine(); var url = "https://localhost:5001"; Console.WriteLine("---------None-------------"); await None(url); Console.WriteLine("---------WhiteIP1-------------"); await WhiteIP1(url); System.Threading.Thread.Sleep(2000); Console.WriteLine("---------WhiteIP2-------------"); await WhiteIP2(url); Console.WriteLine("---------ClientID001-------------"); await ClientID001(url); Console.WriteLine("---------ClientID002-------------"); await ClientID002(url); Console.ReadLine(); } static async Task None(string url) { for (var i = 0; i < 5; i++) { using (var client = new HttpClient()) { client.BaseAddress = new Uri(url); //appsettings中配置,所以自由访问 "EndpointWhitelist": [ "get:/none", "*:/home/add" ], var request = new HttpRequestMessage(HttpMethod.Get, "/none"); var response = await client.SendAsync(request); var content = await response.Content.ReadAsStringAsync(); Console.WriteLine($"状态码:{response.StatusCode},{(int)response.StatusCode},返回值:" + content); } } } static async Task WhiteIP1(string url) { for (var i = 0; i < 5; i++) { using (var client = new HttpClient()) { client.BaseAddress = new Uri(url); /*" GeneralRules": [ { "Endpoint": "*", "Period": "1s", "Limit": 2 } …… */ var request = new HttpRequestMessage(HttpMethod.Get, "/whiteip1"); var response = await client.SendAsync(request); var content = await response.Content.ReadAsStringAsync(); Console.WriteLine($"状态码:{response.StatusCode},{(int)response.StatusCode},返回值:" + content); } } } static async Task WhiteIP2(string url) { for (var i = 0; i < 5; i++) { using (var client = new HttpClient()) { client.BaseAddress = new Uri(url); /*"GeneralRules": [ …… { "Endpoint": "*", "Period": "1m", "Limit": 5 } ]*/ System.Threading.Thread.Sleep(1000); var request = new HttpRequestMessage(HttpMethod.Get, "/whiteip2"); var response = await client.SendAsync(request); var content = await response.Content.ReadAsStringAsync(); Console.WriteLine($"状态码:{response.StatusCode},{(int)response.StatusCode},返回值:" + content); } } } static async Task ClientID001(string url) { for (var i = 0; i < 5; i++) { using (var client = new HttpClient()) { client.BaseAddress = new Uri(url); var request = new HttpRequestMessage(HttpMethod.Get, "/clientid"); request.Headers.Add("X-ClientId", "client_level_001"); var response = await client.SendAsync(request); var content = await response.Content.ReadAsStringAsync(); Console.WriteLine($"状态码:{response.StatusCode},{(int)response.StatusCode},返回值:" + content); } } } static async Task ClientID002(string url) { for (var i = 0; i < 5; i++) { using (var client = new HttpClient()) { client.BaseAddress = new Uri(url); var request = new HttpRequestMessage(HttpMethod.Get, "/clientid"); request.Headers.Add("X-ClientId", "client_level_002"); var response = await client.SendAsync(request); var content = await response.Content.ReadAsStringAsync(); Console.WriteLine($"状态码:{response.StatusCode},{(int)response.StatusCode},返回值:" + content); } } } } }
web服务的appsettings.json配置如下:
{ "Logging": { "LogLevel": { "Default": "Information", "Microsoft": "Warning", "Microsoft.Hosting.Lifetime": "Information" } }, "AllowedHosts": "*", "IpRateLimiting": { "EnableEndpointRateLimiting": false, "StackBlockedRequests": false, "RealIpHeader": "X-Real-IP", "ClientIdHeader": "X-ClientId", "HttpStatusCode": 429, "IpWhitelist": [ "127.0.0.1" ], "EndpointWhitelist": [ "get:/none", "*:/home/add" ], "ClientWhitelist": [ "client_level_001" ], "GeneralRules": [ { "Endpoint": "*", "Period": "1s", "Limit": 2 }, { "Endpoint": "*", "Period": "1m", "Limit": 5 } ] }, "IpRateLimitPolicies": { "IpRules": [ { "Ip": "127.0.0.1", "Rules": [ { "Endpoint": "*", "Period": "1s", "Limit": 10 }, { "Endpoint": "*", "Period": "15m", "Limit": 200 } ] } ] } }
其中 EnableEndpointRateLimiting是全部请求累计还是每个API请求累计,StackBlockedRequests拒约的请求是否计入计数器中。
一场景
"IpRateLimiting": { "EnableEndpointRateLimiting": false, "StackBlockedRequests": false, ……
结果
None是不受限流限制的,因为在白名称内。WhiteIP1是因为一秒只能有两次请求,所以剩下的三次拒绝了,WhiteIP2是等待了两秒杀后再次一秒一次请求,所以请求了三次,第四次出错了,是因为一分钟只能有五次请求。ClientID001是允许的客户端,五次全过,ClientID002是不允许的客户端,五次全部拒绝。
二场景
"IpRateLimiting": { "EnableEndpointRateLimiting": true, "StackBlockedRequests": false, ……
当EnalbeEndopintRateLimiting为true时,第个url都是独立计算的,WhiteI2因为是新的请求,每秒一次,所以全部通过,ClientID002虽然ClientID不正确,但是一秒两次的限制生效了。
三场景
"IpRateLimiting": { "EnableEndpointRateLimiting": false, "StackBlockedRequests": true, ……
StackBlockedRequests为true,拒绝的请也会算在计数中,所以超过了每分钟五次的限制,WhiteIP2会被拒绝,如果把每次钟改成六次,可以看一下效果。
四场景
"IpRateLimiting": { "EnableEndpointRateLimiting": true, "StackBlockedRequests": true, ……
与场景二相同,每个api单独计数,失败的也算在内。
想要更快更方便的了解相关知识,可以关注微信公众号