Nedd hep on Rate limit based of opened session by IP (no replies)

Hi,

I'm trying to set a rate limit not only based on source IP, but based on
number of opened sessions (based on a JSESSIONID cookie) per IP. For
exemple, allow only 10 new sessions per IP in 3 minutes.

I need some help ? How to do that ?

Thanks,

Sebastien Rohaut