Comment 9 for bug 1361782

I have tested this branch on an EOLI test server and one of my own. It works for me with Apache bench spamming requests. It can also be tested by going to an OPAC search page and holding down the "Enter" key after entering search terms. You'll get a 429 response if the settings are set.

I'd say this needs a release note, and the settings should be documented. Other than that, the functionality works, so I've pushed a signoff of Mike's branch to the security repository:

user/dyrcona/lp-1361782-restrict-concurrent-searches-signoff