use request host to compare domain
support getting limit from outside source