Django——对IP访问频率进行限制

####REST_FRAMEWORK 配置

对使用 rest_framework 框架的项目来说，可以使用框架的设置来对api的访问频率进行限制

# 仅包含相关配置部分代码

# settings.py
REST_FRAMEWORK = {
     'DEFAULT_THROTTLE_CLASSES': (
         # 开启匿名用户接口请求频率限制
         'rest_framework.throttling.AnonRateThrottle',
         # 开启授权用户接口请求频率限制
         'rest_framework.throttling.UserRateThrottle'
     ),
     'DEFAULT_THROTTLE_RATES': {
         # 频率限制有second, minute, hour, day
         # 匿名用户请求频率
         'anon': '30/second',
         # 授权用户请求频率
         'user': '30/second'
     }
}


# views.py
class IndexView(APIView):
	throttle_class = (AnonRateThrottle, UserRateThrottle)
	...

####使用middleware中间件来限制IP频率
引用于CSDN

import time
from django.utils.deprecation import MiddlewareMixin
MAX_REQUEST_PER_SECOND=2 #每秒访问次数

class RequestBlockingMiddleware(MiddlewareMixin):
    def process_request(self,request):
        now=time.time()
        request_queue = request.session.get('request_queue',[])
        if len(request_queue) < MAX_REQUEST_PER_SECOND:
            request_queue.append(now)
            request.session['request_queue']=request_queue
        else:
            time0=request_queue[0]
            if (now-time0)<1:
                time.sleep(5)
            request_queue.append(time.time())
            request.session['request_queue']=request_queue[1:]

#启用RequestBlocking中间件
IDDLEWARE = [
    'django.middleware.security.SecurityMiddleware',
    'django.contrib.sessions.middleware.SessionMiddleware',
    'django.middleware.common.CommonMiddleware',
    'django.middleware.csrf.CsrfViewMiddleware',
    'common.middleware.RequestBlockingMiddleware', #在sessions之后，auth之前
    'django.contrib.auth.middleware.AuthenticationMiddleware',
    'django.contrib.messages.middleware.MessageMiddleware',
    'django.middleware.clickjacking.XFrameOptionsMiddleware',
]