Personally, I see Vault having a lot of community momentum behind it; and it can easily solve some complicated security infrastructure beyond storing secrets (the PKI, MySQL & ssh secret backends are particularly compelling).
I also like nginx's limit_zone module. You can put limit_zone in the proxy stanza, and only throttle dynamic requests without throttling access to fast static files.
We often use Rack::Attack to throttle particular HTTP paths differently. Say, the homepage isn't throttled, but the login action is. That layer 7 knowledge is Rack::Attack's main advantage.
As I say in the README, Rack::Attack is complementary to iptables and the limit_zone module.
We've had a lot of success with Trac. Over the past 18 months, we've tweaked our milestones/iteration process several times, and each time we've found Trac suited to our style.
We did. Those are great projects.
Personally, I see Vault having a lot of community momentum behind it; and it can easily solve some complicated security infrastructure beyond storing secrets (the PKI, MySQL & ssh secret backends are particularly compelling).