Inability to mitigate modern volumetric and application-layer attacks. Newer versions offer AI-assisted traffic analysis, lower false positives, and faster mitigation times.

limit_req_zone $binary_remote_addr zone=gbd:10m rate=60r/s; limit_conn_zone $binary_remote_addr zone=conn:10m;