HttpProtectOptions.ttl property

Seconds of silence from an address before its request counter is forgotten.

Signature:

ttl?: number;

Default Value

10

Remarks

Read it as an idle timeout rather than a window length. The counter's TTL is pushed back to this value on every request from that address, so the count survives for as long as the address keeps making requests and is discarded only after a full ttl with none. A client that never pauses that long is counted cumulatively until it reaches HttpProtectOptions.maxRequests and then HttpProtectOptions.banLimit, no matter how slowly it goes.

Also settable as HTTP_PROTECT_TTL; a value passed here wins. Both are read once, in the constructor.

Read this page as plain markdown — no HTML, no navigation. For pasting into an LLM, or for an agent to fetch.