shreemaan-abhishek commented on issue #9328:
URL: https://github.com/apache/apisix/issues/9328#issuecomment-1527322912

   @rukolahasser, The limit-count plugin will work as expected with the 
forward-auth plugin; it will limit the API calls per users appropriately 
instead of limiting requests from the authentication server.
   
   > So if a request goes through `forward-auth` and reaches `limit-count`
   
   You are right, the request goes through the `forward-auth` plugin but 
`forward-auth` does not change it's IP address. So in `limit-count's` POV, the 
request directly comes from the user. Hope I made sense.
   
   I can confidently say this as I used the `real-ip` plugin to change the 
client's IP address. And I added a line of log to check the IP address when the 
request reaches `limit-count`. The client IP was unchanged.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to