网站防御ddos

from flask import Flask, request, abort
from datetime import datetime, timedelta

app = Flask(__name__)

# 请求频率限制配置
REQUEST_LIMIT = 10  # 每分钟最多10次请求
REQUEST_INTERVAL = timedelta(minutes=1)

# 存储用户请求时间的字典
user_request_times = {}

@app.before_request
def limit_request_frequency():
    user_ip = request.remote_addr
    current_time = datetime.now()

    if user_ip in user_request_times:
        # 移除超过时间间隔的请求记录
        user_request_times[user_ip] = [t for t in user_request_times[user_ip] if current_time - t < REQUEST_INTERVAL]

        if len(user_request_times[user_ip]) >= REQUEST_LIMIT:
            abort(429)  # 请求过于频繁，返回429状态码
        else:
            user_request_times[user_ip].append(current_time)
    else:
        user_request_times[user_ip] = [current_time]

@app.route('/')
def index():
    return "Hello, World!"

if __name__ == '__main__':
    app.run()