Search for a command to run...
As a dedicated DevOps Engineer, I've immersed myself in the dynamic world of DevOps, sharing my insights through blogs to support the community. I aim to simplify complex processes, empowering both beginners and experts to navigate DevOps with confidence and ease, fostering collective growth in this ever-evolving field.
No comments yet. Be the first to comment.
The WSO2 Product Basic Troubleshooting Blog Series offers comprehensive guidance on resolving common issues encountered while working with WSO2 products. Covering troubleshooting tips, best practices.
Basic Troubleshooting of WSO2 Applications with WSO2 MI (Micro Integrator) After addressing issues potentially arising from the Identity Server or Micro Gateway, the next critical component in your application architecture to troubleshoot is the Micr...
A practical guide to identifying, measuring, and paying down technical debt in DevOps pipelines and infrastructure
Understanding why modern teams chose containers over bare-metal deployments
If you're running a home server or any Linux machine that's accessible over the internet, password authentication is a ticking time bomb. Automated bots are constantly scanning for SSH servers and attempting brute-force attacks. The solution? SSH key...
If you've tried changing the SSH port on Ubuntu 24.04 and it didn't work, you're not alone. Ubuntu 24.04 handles SSH differently than older versions, and the usual method of editing the config file won't work by itself. In this guide, I'll show you t...
Introduction If you're running a home server and want to access it remotely, you've probably faced this frustrating problem: your ISP keeps changing your public IP address. Every time your router restarts or the IP lease expires, you lose access to y...
In the landscape of API management, ensuring the smooth operation and scalability of APIs is crucial. WSO2 API Manager (WSO2 APIM) offers robust solutions for managing, securing, and throttling APIs. Throttling, specifically, is a vital feature that helps in maintaining the service's efficiency and preventing API overuse. This post will guide you through the process of setting up request throttling with WSO2 APIM, which allows you to limit the number of API calls a user can make within a specified time. For example, you might want to restrict access to a custom profile API to 100 requests per minute.
WSO2 APIM is comprised of several components, each serving a specific function:
API Gateway: Routes API traffic, enforces policies like throttling, and provides security checks.
Key Manager: Handles client authentication and token management.
API Publisher: Allows API providers to publish APIs, share documentation, and more.
Developer Portal: Enables consumers to self-register, discover API functionality, and subscribe to APIs.
Traffic Manager: Manages rate limiting and throttling policies and decisions.
Throttling in WSO2 APIM is managed through the Traffic Manager component, which handles the rate-limiting policies as dictated by the API Publisher settings. When an API is created in the Publisher and subsequently tested and run through the Developer Portal, throttling settings are enforced at the API Gateway.
Suppose you configure an API to have a throttling limit of 100 requests per minute. Once this threshold is reached, WSO2 APIM instructs the API Gateway to block any further requests, typically by issuing an HTTP 429 "Too Many Requests" error message.
Operational Flow:
A request is made to the API through the Gateway.
The API Gateway checks with the APIM to see if the request count for the given API has exceeded the threshold.
If the threshold is exceeded, the APIM signals the Gateway to deny further requests, enforcing the throttling policy.
It is important to understand the resilience of the system. If WSO2 APIM were to experience downtime, the existing requests would still be caught by the API Gateway but throttling would not occur until the connection is re-established. This ensures that API availability is maintained, although without rate limiting.
Here’s how to configure throttling policies in WSO2 APIM:
Log into the Admin Portal: Start by logging into the WSO2 APIM Admin Portal. This is typically accessed via the Traffic Manager component.
Define Throttling Policies: Navigate to the throttling policy section within the dashboard. Here, you can set various limits for different APIs. For instance, you might set a policy to allow 100 requests per minute for a specific API (this is a example).
Apply Policies to APIs: When defining or editing an API using the API Publisher, specify the desired throttling limit (e.g., 100 requests/min) in the API’s swagger definition. This links the API to the throttling policy.
Testing: Once configured, you can test the API using the Developer Portal to ensure the throttling is functioning as expected.
Throttling is a key aspect of API management that helps prevent abuse and ensures fair use of APIs among consumers. WSO2 APIM provides all the necessary tools to effectively manage request rates through comprehensive policies and real-time traffic management. By following the steps outlined above, organizations can safeguard their APIs against potential overuse, thereby enhancing the overall reliability and performance of their digital services.
