使用Java和Redis实现高效的短信防轰炸方案

public class RedisConfig {
    @Bean
    public JedisPool jedisPool() {
        JedisPoolConfig poolConfig = new JedisPoolConfig();
        poolConfig.setMaxTotal(128);
        return new JedisPool(poolConfig, "redis-host", 6379);
    }
}

@Service
public class SmsService {
    
    private static final int PHONE_LIMIT = 3; // 1分钟内最多3次
    private static final int IP_LIMIT = 100; // 1小时内最多100次
    private static final int COOLDOWN = 60; // 60秒冷却时间
    
    @Autowired
    private JedisPool jedisPool;
    
    public SmsResponse sendCode(String phone, String ip) {
        try (Jedis jedis = jedisPool.getResource()) {
            // IP限制检查
            if (!checkIpLimit(jedis, ip)) {
                return SmsResponse.fail("IP请求过于频繁");
            }
            
            // 手机号频率检查
            if (!checkPhoneLimit(jedis, phone)) {
                return SmsResponse.fail("操作过于频繁");
            }
            
            // 冷却时间检查
            if (!checkCooldown(jedis, phone)) {
                return SmsResponse.fail("请等待60秒后再试");
            }
            
            String code = generateCode();
            
            // 存储验证码，5分钟有效期
            jedis.setex(key(phone, "code"), 300, code);
            // 设置冷却时间
            jedis.setex(key(phone, "cooldown"), COOLDOWN, "1");
            
            // 实际发送短信
            sendRealSms(phone, code);
            
            return SmsResponse.success();
        }
    }
    
    private boolean checkIpLimit(Jedis jedis, String ip) {
        String key = key(ip, "ip-limit");
        Long count = jedis.incr(key);
        if (count == 1) {
            jedis.expire(key, 3600);
        }
        return count <= IP_LIMIT;
    }
    
    // 其他辅助方法...
}

private boolean checkPhoneLimit(Jedis jedis, String phone) {
    String script = "local current = redis.call('incr', KEYS[1])\n" +
                   "if current == 1 then\n" +
                   "    redis.call('expire', KEYS[1], ARGV[1])\n" +
                   "end\n" +
                   "return current <= tonumber(ARGV[2])";
    
    String key = key(phone, "phone-limit");
    Object result = jedis.eval(script, 1, key, "60", String.valueOf(PHONE_LIMIT));
    return (Long) result == 1;
}