如何延迟/限制ASP.NET中的登录尝试？

  <membership>
    <providers>
      <add name="AspNetSqlMembershipProvider" type="System.Web.Security.SqlMembershipProvider" connectionStringName="ApplicationServices" enablePasswordRetrieval="false" enablePasswordReset="true" requiresQuestionAndAnswer="false" requiresUniqueEmail="false" maxInvalidPasswordAttempts="5" passwordAttemptWindow="10" applicationName="/" />
    </providers>
  </membership>
</system.web>

services.Configure<SecurityStampValidatorOptions>(options =>
{
    options.ValidationInterval = TimeSpan.FromMinutes(10);
});

services.Configure<BruteForceProtectionOptions>(options =>
{
    options.Enabled = true;
    options.AllowedLoginAttempts = 5;
    options.LockoutDuration = TimeSpan.FromMinutes(10);
});