> For the complete documentation index, see [llms.txt](https://waap.docs.link11.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://waap.docs.link11.com/v2.20.2/using-the-product/how-do-i.../set-rate-limits.md).

# Set Rate Limits and Exemptions

Different types of rate limits are defined in different parts of the Reblaze interface.

**Static rate limits for each application:** Timeouts and request limits per IP are set for each application on the [Advanced Frontend Settings on the Web Proxy page](/v2.20.2/product-walkthrough/settings/web-proxy.md#advanced-frontend-settings).

**By location:** Rate limits for specific locations/URLs can be created in [Rate Limiting Rules](/v2.20.2/product-walkthrough/security/rate-limiting.md) and then including them in [Security Profiles](/v2.20.2/product-walkthrough/settings/web-proxy.md#security-profiles). 

**By traffic source:** Requestors who are submitting excessive requests across the planet can be banned for configured lengths of time. This can be done via [Dynamic Rules](/v2.20.2/product-walkthrough/security/dynamic-rules.md). 

{% hint style="info" %}
In some situations, either [Rate Limiting Rules](/v2.20.2/product-walkthrough/security/rate-limiting.md) or Dynamic Rules could be used. \
\
Rate Limiting Rules are the preferable option. They are more powerful, more flexible, and in a future release, they will fully replace Dynamic Rules.
{% endhint %}

## Creating Rate Limiting Exemptions

Creating exemptions from rate limits is done differently, depending on the scope of the rate limits being addressed.

**Global:** Create an [ACL Policy with an OC suffix](/v2.20.2/product-walkthrough/security/profiles/acl-policies.md#special-acls).

**By location:** Create an [ACL Policy](/v2.20.2/product-walkthrough/security/profiles/acl-policies.md) with the name "**Rate Limit Whitelist**". This can exempt any combination of IP, Country, and ASN. The Policy should then be included in a [Profile](/v2.20.2/product-walkthrough/security/profiles.md), and the Profile should be [assigned](/v2.20.2/product-walkthrough/settings/web-proxy.md#security-profiles) to the appropriate location(s)  or portions of your site/application. Example:

![An ACL with this name will exempt the traffic sources from rate limiting for the specific location](/files/-LxWrTRkeOkyuckjosuh)

**By traffic source:** A traffic source can be exempted from Dynamic Rule filtering either by [adding an Ignore parameter to the Rule itself](/v2.20.2/product-walkthrough/security/dynamic-rules.md#dynamic-rule-settings), or by adding the traffic source to the [Whitelist within the Quarantine section](/v2.20.2/product-walkthrough/security/quarantined.md#whitelist).