最近做了一个系统由于部分接口需要进行耗时操作，因而不希望用户进行频繁访问，需要进行访问频率限制。如果要自己实现一个访问限制功能相对来说也不会太复杂，并且网上有各种代码可以参考。如果自己不想实现这个代码可以使用 Django Ratelimit 。
Django Ratelimit is a ratelimiting decorator for Django views. https://img.yuanmabao.com/zijie/pic/2023/02/24/1fvvbxfja0g.png?branch=master Code: https://github.com/jsocol/django-ratelimit License: Apache Software License Issues: https://github.com/jsocol/django-ratelimit/issues Documentation: http://django-ratelimit.readthedocs.org/
使用方法也相对来说比较简单：
代码语言：javascript复制@ratelimit(key='ip', rate='5/m')
def myview(request):
# Will be true if the same IP makes more than 5 POST
# requests/minute.
was_limited = getattr(request, 'limited', False)
return HttpResponse()
@ratelimit(key='ip', rate='5/m', block=True)
def myview(request):
# If the same IP makes >5 reqs/min, will raise Ratelimited
return HttpResponse()
@ratelimit(key='post:username', rate='5/m', method=['GET', 'POST'])
def login(request):
# If the same username is used >5 times/min, this will be True.
# The `username` value will come from GET or POST, determined by the
# request method.
was_limited = getattr(request, 'limited', False)
return HttpResponse()
@ratelimit(key='post:username', rate='5/m')
@ratelimit(key='post:tenant', rate='5/m')
def login(request):
# Use multiple keys by stacking decorators.
return HttpResponse()
@ratelimit(key='get:q', rate='5/m')
@ratelimit(key='post:q', rate='5/m')
def search(request):
# These two decorators combine to form one rate limit: the same search
# query can only be tried 5 times a minute, regardless of the request
# method (GET or POST)
return HttpResponse()@ratelimit(key='ip', rate='4/h')
def slow(request):
# Allow 4 reqs/hour.
return HttpResponse()
rate = lambda r: None if request.user.is_authenticated else '100/h'
@ratelimit(key='ip', rate=rate)
def skipif1(request):
# Only rate limit anonymous requests
return HttpResponse()
@ratelimit(key='user_or_ip', rate='10/s')
@ratelimit(key='user_or_ip', rate='100/m')
def burst_limit(request):
# Implement a separate burst limit.
return HttpResponse()
@ratelimit(group='expensive', key='user_or_ip', rate='10/h')
def expensive_view_a(request):
return something_expensive()
@ratelimit(group='expensive', key='user_or_ip', rate='10/h')
def expensive_view_b(request):
# Shares a counter with expensive_view_a
return something_else_expensive()
@ratelimit(key='header:x-cluster-client-ip')
def post(request):
# Uses the X-Cluster-Client-IP header value.
return HttpResponse()
@ratelimit(key=lambda r: r.META.get('HTTP_X_CLUSTER_CLIENT_IP',
r.META['REMOTE_ADDR'])
def myview(request):
# Use `X-Cluster-Client-IP` but fall back to REMOTE_ADDR.
return HttpResponse()不过需要注意如果和django rest framwork一起使用的话，要将Ratelimit 装饰器放到第一行，如下：
代码语言：javascript复制@ratelimit(key='user', rate='1/3s', block=True, method=ratelimit.ALL)
@api_view(['POST', 'GET'])
@csrf_exempt
def api_get_level(request):否则会导致如下的错误信息：
代码语言：javascript复制IndexError at /rest-api/level/
tuple index out of range
Request Method: GET
Request URL: http://192.168.1.195:8006/rest-api/level/
Django Version: 2.2.7
Exception Type: IndexError
Exception Value:
tuple index out of range
Exception Location: F:PyCharmProjectsservervenvlibsite-packagesratelimitdecorators.py in _wrapped, line 23
Python Executable: F:PyCharmProjectsservervenvScriptspython.exe
Python Version: 3.7.5
Python Path:
['F:\PyCharmProjects\server\TaichiGameServer',
'I:\Python37-64\python37.zip',
'I:\Python37-64\DLLs',
'I:\Python37-64\lib',
'I:\Python37-64',
'F:\PyCharmProjects\server\venv',
'F:\PyCharmProjects\server\venv\lib\site-packages',
'F:\PyCharmProjects\server\venv\lib\site-packages\setuptools-39.1.0-py3.7.egg']
Server time: Tue, 24 Dec 2019 09:49:01 0800
Traceback (most recent call last):
File "F:PyCharmProjectsservervenvlibsite-packagesdjangocorehandlersexception.py", line 34, in inner
response = get_response(request)
File "F:PyCharmProjectsservervenvlibsite-packagesdjangocorehandlersbase.py", line 115, in _get_response
response = self.process_exception_by_middleware(e, request)
File "F:PyCharmProjectsservervenvlibsite-packagesdjangocorehandlersbase.py", line 113, in _get_response
response = wrapped_callback(request, *callback_args, **callback_kwargs)
File "F:PyCharmProjectsservervenvlibsite-packagesdjangoviewsdecoratorscsrf.py", line 54, in wrapped_view
return view_func(*args, **kwargs)
File "F:PyCharmProjectsservervenvlibsite-packagesdjangoviewsgenericbase.py", line 71, in view
return self.dispatch(request, *args, **kwargs)
File "F:PyCharmProjectsservervenvlibsite-packagesrest_frameworkviews.py", line 505, in dispatch
response = self.handle_exception(exc)
File "F:PyCharmProjectsservervenvlibsite-packagesrest_frameworkviews.py", line 465, in handle_exception
self.raise_uncaught_exception(exc)
File "F:PyCharmProjectsservervenvlibsite-packagesrest_frameworkviews.py", line 476, in raise_uncaught_exception
raise exc
File "F:PyCharmProjectsservervenvlibsite-packagesrest_frameworkviews.py", line 502, in dispatch
response = handler(request, *args, **kwargs)
File "F:PyCharmProjectsservervenvlibsite-packagesrest_frameworkdecorators.py", line 50, in handler
return func(*args, **kwargs)
File "F:PyCharmProjectsservervenvlibsite-packagesdjangoviewsdecoratorscsrf.py", line 54, in wrapped_view
return view_func(*args, **kwargs)
File "F:PyCharmProjectsservervenvlibsite-packagesratelimitdecorators.py", line 23, in _wrapped
request = args[1]
IndexError: tuple index out of range☆文章版权声明☆
* 网站名称：obaby@mars
* 网址：https://h4ck.org.cn/
* 本文标题： 《Django 限制访问频率》
* 本文链接：https://h4ck.org.cn/2019/12/django-限制访问频率/
* 转载文章请标明文章来源，原文标题以及原文链接。请遵从 《署名-非商业性使用-相同方式共享 2.5 中国大陆 (CC BY-NC-SA 2.5 CN) 》许可协议。
分享文章：
相关文章:
- 再谈《Django 限制访问频率》
- 由apscheduler引发的django.db.utils.InternalError: (1054, u”Unknown column ‘rms.go_datetime’ in ‘field list'”)
- django raw_id_fields 显示名称而不是id（raw_id_fields: How to show a name instead of id）
- Django REST framework foreignkey 序列化
- Django admin Foreignkey ManyToMany list_display展示
- Apache2 Django {“detail”:”Authentication credentials were not provided.”}
- Django input value值被截断
- Django APScheduler uwsgi 定时任务重复运行
- django 主动抛出 403 异常
- ngix uwsgi django 以及阿里云rds数据库数据导入
