add limit config, add blacklist IPs