limithit / ngx_cookie_limit_req_module

This module not only limits the access rate of cookies but also limits the number of malicious ip forged cookies.