# HAPROXY sc\_get\_gpc0 not working

**URL:** <https://discourse.haproxy.org/t/haproxy-sc-get-gpc0-not-working/5447>\
**Category:** Help!\
**Created:** [July 8, 2020, 5:44am UTC](https://discourse.haproxy.org/t/haproxy-sc-get-gpc0-not-working/5447 "2020-07-08T05:44:04Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Fireant456](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.haproxy.org/fireant456/32/1215_2.png) [@Fireant456](https://discourse.haproxy.org/u/Fireant456)\
**Post date:** [July 8, 2020, 5:44am UTC](https://discourse.haproxy.org/t/haproxy-sc-get-gpc0-not-working/5447/1 "2020-07-08T05:44:04Z")

</div>

I have been struggling to get this rate-limiting configuration to work on HAProxy. As seen below I am attempting to use “sc2\_get\_gpc0” to get a second value stored in the hour\_hold stick table. This gpc value is incremented every time a request is made when a client has already hit the standard rate limit. This value is supposed to stay in the table for the expiration time of 1 hour. I can’t seem to get the acl to find that the value is greater than 0 and block connections after the standard rate limit “is\_abuse” has passed 20 seconds without a rate of requests higher than the 10 requests in 20 seconds limit.

```auto
backend hour_hold
    stick-table type binary len 8 size 100k expire 60m store gpc0

backend backend
    stick-table type binary len 8 size 100k expire 60m store http_req_rate(20s)
    http-request track-sc1 base32+src table backend
    http-request set-var(req.rate_limit) path,map_beg(/usr/local/etc/haproxy/rates.map,10)
    http-request set-var(req.request_rate) base32+src,table_http_req_rate(backend)
    acl is_abuse var(req.rate_limit),sub(req.request_rate) lt 0
    http-request track-sc2 base32+src table hour_hold if is_abuse
    http-request sc-inc-gpc0(2) if is_abuse
    # acl inc_abuse_cnt sc2_inc_gpc0(hour_hold) gt 0
    acl abuse_cnt sc2_get_gpc0(hour_hold) gt 0
    http-request deny deny_status 429 if is_abuse or abuse_cnt
    # http-request deny deny_status 429 if abuse_cnt
    # http-request deny deny_status 429 if is_abuse inc_abuse_cnt

```

---

<div class="post-metadata">

**Author:** ![Fireant456](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.haproxy.org/fireant456/32/1215_2.png) [@Fireant456](https://discourse.haproxy.org/u/Fireant456)\
**Post date:** [July 10, 2020, 2:38am UTC](https://discourse.haproxy.org/t/haproxy-sc-get-gpc0-not-working/5447/2 "2020-07-10T02:38:46Z")

</div>

I have tried a `http-request set-var(req.hour_hold) sc2-get-gpc0(hour_hold)` similar to the rate limit and request rate vars but that did not seem to work either. I have seen this way of holding keys in another stick table using ip keys but not with the base32+src key value. I wonder if that has something to do with sc\_get\_gpc0 failing here…

Any thoughts?