feat(rate-limit): enable rate limit in production (#3362)

Co-authored-by: Ben Rometsch <ben.rometsch@gmail.com>
Flagsmith · Feb 5, 2024 · f9545f7 · f9545f7
1 parent da21b8c
commit f9545f7
Show file tree

Hide file tree

Showing 2 changed files with 22 additions and 0 deletions.
diff --git a/docs/docs/system-administration/system-limits.md b/docs/docs/system-administration/system-limits.md
@@ -31,3 +31,9 @@ In order to ensure consistent performance, Flagsmith has the following limitatio
 ### Segment Data Elements
 
 - Maximum size of a Segment Rule Value is **1,000 bytes**
+
+### Rate Limit
+
+Requests made to admin endpoints (i.e., non-SDK endpoints) are subject to a default rate limit of 500 per minute. If you
+are self-hosting, you have the flexibility to modify this limit by adjusting the value of the environment variable
+`USER_THROTTLE_RATE`.
diff --git a/infrastructure/aws/production/ecs-task-definition-web.json b/infrastructure/aws/production/ecs-task-definition-web.json
@@ -178,6 +178,22 @@
                 {
                     "name": "PIPEDRIVE_IGNORE_DOMAINS",
                     "value": "flagsmith.com,solidstategroup.com,restmail.net,bullettrain.io,flagsmithe2etestdomain.io"
+                },
+                {
+                    "name": "DEFAULT_THROTTLE_CLASSES",
+                    "value": "core.throttling.UserRateThrottle"
+                },
+                {
+                    "name": "DJANGO_REDIS_CONNECTION_FACTORY",
+                    "value": "core.redis_cluster.ClusterConnectionFactory"
+                },
+                {
+                    "name": "USER_THROTTLE_CACHE_BACKEND",
+                    "value": "django_redis.cache.RedisCache"
+                },
+                {
+                    "name": "USER_THROTTLE_CACHE_LOCATION",
+                    "value": "rediss://serverless-redis-cache-c4q8sw.serverless.euw2.cache.amazonaws.com:6379"
                 }
             ],
             "secrets": [