Throttling

Jump to bottom

José Bonnet edited this page Feb 22, 2019 · 1 revision

This wiki page details the design of throtling in 5GTANGO's V&V and SP.

Context

Any API nowadays needs to protect itself against abuse in its usage.

Rate limiting

We plan to re-use what we have built for SONATA.

Initialization

We need to initialize two different kinds of throttles:

Anonynous requests: these are the requests that have to be made without yet having a way to authenticate the requestor. Good examples of this kind of requests are the user registration (since the user is registering, it does not yet posess a way to authenticate him/herself with the system) and the user login (for the same reason);
Authenticated requests: these are the requests that have some form of authentication already done.