Django——对IP访问频率进行限制

左手的ㄟ右手 2022-05-16 05:24 180阅读 0赞

\#\#\#\#REST\_FRAMEWORK 配置

> 对使用 rest\_framework 框架的项目来说，可以使用框架的设置来对api的访问频率进行限制

# 仅包含相关配置部分代码
    
    # settings.py
    REST_FRAMEWORK = { 
         'DEFAULT_THROTTLE_CLASSES': (
             # 开启匿名用户接口请求频率限制
             'rest_framework.throttling.AnonRateThrottle',
             # 开启授权用户接口请求频率限制
             'rest_framework.throttling.UserRateThrottle'
         ),
         'DEFAULT_THROTTLE_RATES': { 
             # 频率限制有second, minute, hour, day
             # 匿名用户请求频率
             'anon': '30/second',
             # 授权用户请求频率
             'user': '30/second'
         }
    }
    
    
    # views.py
    class IndexView(APIView):
    	throttle_class = (AnonRateThrottle, UserRateThrottle)
    	...

\#\#\#\#使用middleware中间件来限制IP频率  
[引用于CSDN][CSDN]

import time
    from django.utils.deprecation import MiddlewareMixin
    MAX_REQUEST_PER_SECOND=2 #每秒访问次数
    
    class RequestBlockingMiddleware(MiddlewareMixin):
        def process_request(self,request):
            now=time.time()
            request_queue = request.session.get('request_queue',[])
            if len(request_queue) < MAX_REQUEST_PER_SECOND:
                request_queue.append(now)
                request.session['request_queue']=request_queue
            else:
                time0=request_queue[0]
                if (now-time0)<1:
                    time.sleep(5)
                request_queue.append(time.time())
                request.session['request_queue']=request_queue[1:]
    
    #启用RequestBlocking中间件
    IDDLEWARE = [
        'django.middleware.security.SecurityMiddleware',
        'django.contrib.sessions.middleware.SessionMiddleware',
        'django.middleware.common.CommonMiddleware',
        'django.middleware.csrf.CsrfViewMiddleware',
        'common.middleware.RequestBlockingMiddleware', #在sessions之后，auth之前
        'django.contrib.auth.middleware.AuthenticationMiddleware',
        'django.contrib.messages.middleware.MessageMiddleware',
        'django.middleware.clickjacking.XFrameOptionsMiddleware',
    ]

[CSDN]: https://blog.csdn.net/weixin_38748717/article/details/79095399