Django 对IP访问频率进行限制的例子

rest_framework 配置

对使用 rest_framework 框架的项目来说，可以使用框架的设置来对api的访问频率进行限制

rest_framework = {
   'default_parser_classes': (
    'rest_framework.parsers.jsonparser',
    'rest_framework.parsers.formparser',
    'rest_framework.parsers.multipartparser',
  ),

  'default_authentication_classes': (
    # 'lecare.core.rest_auth.crosssitesessionauthentication',
  ),

  'default_permission_classes': [
    # 'rest_framework.permissions.isauthenticated',
    'rest_framework.permissions.allowany',
  ],

  'page_size': 20,
  'unicode_json': false,
  # 'coerce_decimal_to_string': false,
  # 'exception_handler': 'lecare.core.custom_exception_handler.custom_exception_handler',
  'jwt_expiration_delta': datetime.timedelta(hours = 2),
  'jwt_refresh_expiration_delta': datetime.timedelta(days = 360),
  'jwt_allow_refresh': false,
  'jwt_auth_header_prefix': 'jwt',
  'jwt_payload_handler': 'consumer.jwt_conf.jwt_payload_handler',
  'jwt_response_payload_handler': 'consumer.jwt_conf.jwt_response_payload_handler',
  'jwt_get_user_secret_key': 'consumer.jwt_conf.jwt_get_secret_key',
  # 'default_throttle_classes': (
  #   # 开启匿名用户接口请求频率限制
  #   'rest_framework.throttling.anonratethrottle',
  #   # 开启授权用户接口请求频率限制
  #   'rest_framework.throttling.userratethrottle'
  # ),
  # 'default_throttle_rates': {
  #   # 频率限制有second, minute, hour, day
  #   # 匿名用户请求频率
  #   'anon': '30/second',
  #   # 授权用户请求频率
  #   'user': '30/second'
  # }
}

使用middleware中间件来限制ip频率

import time
from django.utils.deprecation import middlewaremixin
max_request_per_second=2 #每秒访问次数

class requestblockingmiddleware(middlewaremixin):
  def process_request(self,request):
    now=time.time()
    request_queue = request.session.get('request_queue',[])
    if len(request_queue) < max_request_per_second:
      request_queue.append(now)
      request.session['request_queue']=request_queue
    else:
      time0=request_queue[0]
      if (now-time0)<1:
        time.sleep(5)
      request_queue.append(time.time())
      request.session['request_queue']=request_queue[1:]

#启用requestblocking中间件
iddleware = [
  'django.middleware.security.securitymiddleware',
  'django.contrib.sessions.middleware.sessionmiddleware',
  'django.middleware.common.commonmiddleware',
  'django.middleware.csrf.csrfviewmiddleware',
  'common.middleware.requestblockingmiddleware', #在sessions之后，auth之前
  'django.contrib.auth.middleware.authenticationmiddleware',
  'django.contrib.messages.middleware.messagemiddleware',
  'django.middleware.clickjacking.xframeoptionsmiddleware',
]

以上这篇django 对ip访问频率进行限制的例子就是小编分享给大家的全部内容了，希望能给大家一个参考，也希望大家多多支持。