Skip to content

API server rate limiting #2031

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 9 commits into from
Jan 8, 2021
Merged

API server rate limiting #2031

Changes from 2 commits
Commits
Show all changes
9 commits
Select commit Hold shift + click to select a range
3ea0442
enables rate limiting for API server
Dec 8, 2020
380071e
Merge branch 'master' into api-ratelimitis
GitHK Dec 8, 2020
982d1b2
Merge branch 'master' into api-ratelimitis
GitHK Dec 8, 2020
a855230
Merge branch 'master' into api-ratelimitis
GitHK Dec 10, 2020
2bfd909
Merge branch 'master' into api-ratelimitis
GitHK Dec 11, 2020
223b007
Merge branch 'master' into api-ratelimitis
GitHK Dec 14, 2020
5d6ecde
added utils for testing service rate limits
Dec 14, 2020
0b57836
Merge branch 'master' into api-ratelimitis
GitHK Jan 7, 2021
6e28da4
added wrapper
Jan 7, 2021
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 10 additions & 1 deletion services/docker-compose.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@ services:
- traefik.http.routers.${SWARM_STACK_NAME}_api-server.rule=hostregexp(`{host:.+}`)
- traefik.http.routers.${SWARM_STACK_NAME}_api-server.entrypoints=simcore_api
- traefik.http.routers.${SWARM_STACK_NAME}_api-server.priority=1
- traefik.http.routers.${SWARM_STACK_NAME}_api-server.middlewares=${SWARM_STACK_NAME}_gzip@docker
- traefik.http.routers.${SWARM_STACK_NAME}_api-server.middlewares=${SWARM_STACK_NAME}_gzip@docker,ratelimit-${SWARM_STACK_NAME}_api-server
networks:
- default

Expand Down Expand Up @@ -334,6 +334,15 @@ services:
placement:
constraints:
- node.role == manager
labels:
# for each service in the stack a new middlaware for rate limiting needs to be registered here
# requests = average / period this is how the limits are defined
- traefik.http.middlewares.ratelimit-${SWARM_STACK_NAME}_api-server.ratelimit.average=1
- traefik.http.middlewares.ratelimit-${SWARM_STACK_NAME}_api-server.ratelimit.period=1m
# a burst is computed over a period of 1 second
- traefik.http.middlewares.ratelimit-${SWARM_STACK_NAME}_api-server.ratelimit.burst=10
# X-Forwarded-For header extracts second IP from the right, count starts at one
- traefik.http.middlewares.ratelimit-${SWARM_STACK_NAME}_api-server.ratelimit.sourcecriterion.ipstrategy.depth=2
networks:
- default
- interactive_services_subnet
Expand Down