ariandanim
Dear all,
How to make rate limiting for every user access except admin due to protect from attacker?
Where Next?
Trending in Questions
Other Trending Topics
Latest Phoenix Threads
Latest on Elixir Forum
Sponsor Spotlight
Error tracking, logs, APM, uptime and cron monitoring in one dev-friendly platform. Find and fix problems before your users notice.
Categories:
Sub Categories:
Forums
Popular Tags
- #ecto
- #liveview
- #troubleshooting
- #learning-elixir
- #library
- #deployment
- #erlang
- #testing
- #genserver
- #mix
- #absinthe
- #remote-other
- #otp
- #plug
- #how-to-question
- #macros
- #postgres
- #elixirconf
- #channels
- #exunit
- #discussion
- #code-sync
- #podcasts
- #javascript
- #onsite
- #dialyzer
- #docker
- #authentication
- #umbrella
- #full-time-contract
- #podcasts-by-brainlid
- #ecto-query
- #ai
- #elixirconf-us
- #blog-post
- #elixir-ls
- #phoenix_html
- #iex
- #graphql
- #genstage
- #websockets
- #supervisor
- #advent-of-code
- #distillery
- #processes
- #api
- #forms
- #elixirconf-eu
- #metaprogramming
- #hex
Our Sponsors
Build Elixir applications with speed and confidence.
Supporting innovation across the BEAM ecosystem.
We build reliable cloud platforms for business-critical systems.
Error tracking, logs, uptime, and Just Enough APM. Built for developers.
Elixir, Erlang & BEAM conferences from Code Sync - join us in 2026!
Master modern tools, write cleaner code, and tackle real-world challenges.
Bringing learning, work and compliance together since 1987.
The deployment platform built for Elixir: PaaS ease, VPS control.
The team behind Membrane, Popcorn, LiveDebugger. Available for hire.
Courses that'll move you from confusion to "Aha, now I get it!"
Showing Posts 1 to 1- Show Best Posts
- Show All (oldest first)
- Show All (newest first)
bluejack
The package Hammer works well for rate limiting, at least using ETS. They don’t recommend it for production, but if you are not a heavily distributed app it should be ok. The recommend Redis for production, but I have not been able to get Hammer talking to redis, even though I have no other problems with Redis.
Anyway, to implement Hammer as a rate limiter, you can do it at the controller level, although I do it as a plug. Since you are rate limiting based on user, you can carve out an exception for your admin user.
The best model there would be to introduce some kind of role concept into your user model. This way, not only can you exempt the “admin” role, but you could set different rate limit policies for other roles. E.g., if you had power users who paid you to increase the velocity ceiling.
Hammer: https://hexdocs.pm/hammer/frontpage.html
A tutorial I found useful: Rate-limiting a Phoenix API with Hammer - ElixirCasts