Rate Limit per user

[myasul]

We plan to create a distinct user per IoT device that connects to our RabbitMQ server to improve our security. Is it possible to add a rate limit per user so that if someone gets hold of one of the user credentials, they cannot pump messages into the queue in a very short span of time (DDOS attack)?

[michaelklishin]

RabbitMQ does not support any kind of rate limits in terms of bytes/second. You can use HAproxy to set up rate limits per connection.

On top of that, amqpprox supports rate limiting per virtual host, which do not exist in MQTT but with RabbitMQ specifically, you can use a couple of features and conventions. Maybe that would fit your needs since you'd be able to group devices that way.

[myasul]

Will definitely look into this. Thank you very much for the quick response, @michaelklishin !