[pmlnr]

Been there recently. Rate limit on nginx and anti-syn flood on pf solved it.

[spiderfarmer]

I'm being hit with 300 req/s 24/7 from hundreds of thousands of unique IP's from residential proxies. I can't rate limit any further without hurting the real users.

[cowboylowrez]

Yeah real users are just as hosed as the small sites. I get blocked simply because of the netblock I browse from.

[oasisbob]

Yeah, IP-based rate limits are nearly ineffective these days.

[pmlnr]

Nginx has per server, per path limiting options.