For our map locator we have a .ashx handler that could be requested several times in a minute by actual guests. However, we have been hit with attacks where the handler is only requested every 15 seconds but it continues for hours. We’d like to set a limit of 100 or even a few hundred requests per hour. Is that possible?
Update: I just found this:
Once a client exceeds the threshold specified in the time period, the rule will trigger. The periods available, by plan, are:
- 1 second or 1 minute (Free and Pro)
- 1 second, 1 minute, or 10 minutes (Business)
- Any period between 1 second and 1 hour (Enterprise)