Why Adaptive Rate Limiting Is a Game-Changer

Re:Why Adaptive Rate Limiting Is a Game-Changer by malfist on Saturday July 22, 2023 @01:41PM (#36828127)

IPv6 makes it trivial to come up with a mind boggling number of ip addresses. You don't even have to leave your network

[ Parent | on HN ]

Re:Why Adaptive Rate Limiting Is a Game-Changer by jsnell on Saturday July 22, 2023 @01:48PM (#36828172)

Nobody does rate limiting or other abuse work on a full /128. Typically a /64 is treated as the equivalent of an IPv4 address.

[ Parent | on HN ]

Re:Why Adaptive Rate Limiting Is a Game-Changer by charcircuit on Saturday July 22, 2023 @02:03PM (#36828303)

This will have many false positives. Especially if the address is from a mobile network.

[ Parent | on HN ]

Re:Why Adaptive Rate Limiting Is a Game-Changer by costco on Saturday July 22, 2023 @08:51PM (#36831505)

Last I read this is how Instagram rate limits IPV6. See https://news.ycombinator.com/item?id=32687694

So apparently not enough false positives for them to care.

[ Parent | on HN ]

Re:Why Adaptive Rate Limiting Is a Game-Changer by fulafel on Sunday July 23, 2023 @07:06AM (#36834271)

Is it common for mobile networks to hand out short (64 or smaller) prefixes to phones? Phones are routers after all (hotspot) so this would seem to break stuff.

[ Parent | on HN ]

Re:Why Adaptive Rate Limiting Is a Game-Changer by charcircuit on Sunday July 23, 2023 @01:33PM (#36837593)

Multiple phones will use addresses with same prefix. This makes it hard to apply targetted limits to an IP. This is why mobile IPv6 proxies are valuable.

[ Parent | on HN ]

Re:Why Adaptive Rate Limiting Is a Game-Changer by zhfliz on Monday July 24, 2023 @10:50AM (#36848984)

people don't care about false positives on CGNAT either, so not much difference to the IPv4 situation if you target /64s

[ Parent | on HN ]

Re:Why Adaptive Rate Limiting Is a Game-Changer by TekMol on Saturday July 22, 2023 @01:57PM (#36828252)

First of all, Twitter does not support IPv6.

Secondly, if they would, they could simply rate limit by the first x chars of the address.

[ Parent | on HN ]