WARNING API: Rate-limiting login attempts (key: rate_limiting)

Help Community Help
1

I am seeing this message appear 6x in the FTL.log every 30 seconds>

2025-03-26 11:39:48.756 WARNING API: Rate-limiting login attempts (key: rate_limiting)
2025-03-26 11:39:48.770 WARNING API: Rate-limiting login attempts (key: rate_limiting)
2025-03-26 11:39:48.770 WARNING API: Rate-limiting login attempts (key: rate_limiting)
2025-03-26 11:39:48.771 WARNING API: Rate-limiting login attempts (key: rate_limiting)
2025-03-26 11:39:48.790 WARNING API: Rate-limiting login attempts (key: rate_limiting)
2025-03-26 11:39:48.793 WARNING API: Rate-limiting login attempts (key: rate_limiting)

image
image602×111 2.5 KB

Running on TrueNAS Scale on a HP Proliant Gen8 Microserver.

Docker Tag [2025.03.0]
Core [v6.0.5]
FTL [v6.0.4]
Web interface [v6.0.2]

This is the first install of Pi-Hole.

Why am I seeing this? Should I be concerned? Does it need fixing, and if so how?

Many thanks

2

I've discovered this is not an issue originating from Pi-Hole, but caused by a number of command line switches I've configured in Home Assistant, as detailed below.

But is there any way to alter the rate limits for API login? I understand they're probably in place for security purposes.

Thanks

3

You could temporarily increase the session limit, e.g.

sudo pihole-FTL --config webserver.api.max_sessions 17

But this should really be addressed by the third-party maintainers.

They have to explicitly close the API session after finishing their call or calls, which is different to v5, which didn't have a REST API with session based login.
For several calls in a row, they should collate several API calls to use the same session.

They would need to do so on successful calls as well as on ones that would encounter exceptions, e.g. if the connection dropped temporarily during communication.

2 Likes
4

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.