Rate Limiting Options
would love to be able to set custom rate limits for the actions, queries, mutations, and actions.
it would be nice to manually add IP addresses to block, block by country, query depth limits, etc.
6 Replies
Stack
Implementing Rate Limiting with only two numbers
Implementing application rate limiting when you have fast access to a database with strong ACID guarantees. Token bucket and fixed window, with fairne...
Yup I know about this but I'm asking for something else thanks though, 😃
To me they said that they dont expose IP Adresses inside functions: https://discord.com/channels/1019350475847499849/1203007687344914503
Is the goal to cap usage fees?
yes and also block users
block users at the network layer, vs. having it be login-protected and blocking individual users I presume.
The problem with IP is that they are shared with many users, and it's easy for attackers to spread their requests across many IPs, so you'd only be protecting against accidental bad usage, and could be blocking many other customers at the same time.
Feedback noted though - as we develop network-layer DDOS protections hopefully these concerns just become our problem vs. yours