Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: rate limits for GET #549

Merged
merged 13 commits into from
Sep 30, 2024
Merged

feat: rate limits for GET #549

merged 13 commits into from
Sep 30, 2024

Conversation

alexey-yarmosh
Copy link
Member

Fixes #526

Copy link
Member

@MartinKolarik MartinKolarik left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

After some more thought, I think this limit should always be applied per IP address. The effect will be more or less the same, but there is a good reason we had CORS configured to disallow sending the tokens on GET. Doing so triggers additional preflight requests, which add extra load, and also makes it much harder to add a CDN caching for finished measurements in the future.

config/default.cjs Outdated Show resolved Hide resolved
@MartinKolarik MartinKolarik merged commit 2338cc8 into master Sep 30, 2024
5 checks passed
@MartinKolarik MartinKolarik deleted the get-rate-limiter branch September 30, 2024 12:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Rate limits for GET
2 participants