IPv6 Ratelimiting
Many applications reuse rate limiting implementation of IPv4 for IPv6 which doesn’t work as expected since ISPs usually assign /64 or /56 prefix for each user which allows usage of 2^64 IPv6 addresses. So reused rate limiting code is useless for IPv6.
Little better way to implement rate limiting for IPv6 is at prefix level.
Here is a comparison of some popular reverse proxies.
| Proxy | Prefix level ratelimiting for ipv6 | Native auto tls | http3 |
|---|---|---|---|
| Nginx | yes | no | yes |
| envoy | yes | no | yes |
| haproxy | yes | no | yes |
| caddy | no | yes | yes |
| traefik | yes | yes | yes |
Read more: https://adam-p.ca/blog/2022/02/ipv6-rate-limiting/