Protect public webhooks with Ainoflow Guard rate limiting

Webhook Rate Limiter (Ainoflow Guard)

Stop webhook flooding before it starts. Add production-grade rate limiting to any n8n webhook in minutes - reject abusive traffic before expensive workflow logic executes.

✨ Key Features

- ⚡ Edge-style decisions - Allow/deny checked before any business logic runs - 🛡️ Burst protection - Configurable limits (requests per time window) - 🔄 Stateless - No queues, databases, or counters needed in n8n - 📡 Proxy-aware - Correct IP extraction behind Cloudflare, nginx, load balancers - 🔑 Dual identity modes - Rate limit by IP address or API key - ⏱️ Retry-After headers - Proper 429 responses with retry guidance - 💥 Fail-open - Guard outage doesn't block your production traffic - 🔧 Auto-setup - Guard policy auto-creates on first request

🎯 How It Works

1. Webhook receives POST request

2. Identity extracted from headers: - API key (x-api-key) → per-client limiting - Client IP (X-Forwarded-For / x-real-ip) → per-IP limiting

3. Guard decides allow or deny: - POST /api/v1/guard/{route:identity}/counter - Checks against configured rate limit policy