Skip to content

Conversation

tricky42
Copy link
Contributor

  • Add comprehensive endpoint-based rate limiting documentation
  • Document inflight request limiting for concurrent request protection
  • Add protected endpoints table with rate limit types and actions
  • Add Makefile help target and dev server target
  • Update dependencies to latest minor versions

- Add comprehensive endpoint-based rate limiting documentation
- Document inflight request limiting for concurrent request protection
- Add protected endpoints table with rate limit types and actions
- Add Makefile help target and dev server target
- Update dependencies to latest minor versions
@vinckr vinckr marked this pull request as draft July 29, 2025 09:22
@vinckr vinckr added the upstream Issue is caused by an upstream dependency. label Aug 1, 2025
@tricky42 tricky42 marked this pull request as ready for review September 5, 2025 10:47
@tricky42 tricky42 requested a review from Demonsthere September 5, 2025 10:50
@tricky42
Copy link
Contributor Author

tricky42 commented Sep 5, 2025

@vinckr / @Demonsthere review pls

- Provides options for Enterprise and Growth customers to whitelist internal IPs for higher rate limits.
- Balances security needs with the requirements of high-volume legitimate traffic.

### Notes on rate limit rules
### Types of endpoint-based protection

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think here we should keep the distinction of layers:

  1. Global CDN layer with Cloudflare
  2. Local Business logic layer with Envoy
    The current proposal flattens that which i don't think is a good idea.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I intentionally chose not to disclose these "implementation" details, as they shouldn't affect the customer, and it also allows us the flexibility to modify the implementation without needing to update this documentation or notify the customers.

@tricky42 tricky42 requested a review from Demonsthere September 7, 2025 13:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
upstream Issue is caused by an upstream dependency.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants