chore:setup rate limiting for both data amount and request count

chore: tweak
Informasjonsforvaltning · Aug 28, 2024 · 4619132 · 4619132
1 parent be74ea2
commit 4619132
Show file tree

Hide file tree

Showing 4 changed files with 47 additions and 2 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -1,7 +1,7 @@
 FROM eclipse-temurin:17-jre-alpine
 
 ARG USER=default
-ENV HOME /home/$USER
+ENV HOME=/home/$USER
 
 ENV TZ=Europe/Oslo
 RUN ln -snf /usr/share/zoneinfo/$TZ /etc/localtime && echo $TZ > /etc/timezone
@@ -16,4 +16,4 @@ USER $USER
 WORKDIR $HOME
 
 COPY --chown=app:app /target/app.jar app.jar
-CMD java -jar -XX:+UseZGC $JAVA_OPTS app.jar
+CMD ["sh", "-c", "java -jar -XX:+UseZGC $JAVA_OPTS app.jar"]
diff --git a/deploy/demo/ingress.yaml b/deploy/demo/ingress.yaml
@@ -3,6 +3,21 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: catalog-view-api
+  annotations:
+    nginx.ingress.kubernetes.io/proxy-buffering: 'on'
+    nginx.ingress.kubernetes.io/limit-rate-after: '15729'
+    nginx.ingress.kubernetes.io/limit-rate: '128'
+    nginx.ingress.kubernetes.io/limit-rpm: '10'
+    nginx.ingress.kubernetes.io/limit-burst-multiplier: '2'
+    nginx.ingress.kubernetes.io/proxy-read-timeout: '60'
+    nginx.ingress.kubernetes.io/proxy-send-timeout: '60'
+    nginx.ingress.kubernetes.io/limit-whitelist: '10.0.0.0/8'
+    nginx.ingress.kubernetes.io/server-snippet: |
+      server_tokens off;
+      location ~ ^/(ping|ready|prometheus) {
+        deny all;
+        return 404;
+      }
 spec:
   ingressClassName: nginx
   rules:

diff --git a/deploy/prod/ingress.yaml b/deploy/prod/ingress.yaml
@@ -3,6 +3,21 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: catalog-view-api
+  annotations:
+    nginx.ingress.kubernetes.io/proxy-buffering: 'on'
+    nginx.ingress.kubernetes.io/limit-rate-after: '15729'
+    nginx.ingress.kubernetes.io/limit-rate: '128'
+    nginx.ingress.kubernetes.io/limit-rpm: '10'
+    nginx.ingress.kubernetes.io/limit-burst-multiplier: '2'
+    nginx.ingress.kubernetes.io/proxy-read-timeout: '60'
+    nginx.ingress.kubernetes.io/proxy-send-timeout: '60'
+    nginx.ingress.kubernetes.io/limit-whitelist: '10.0.0.0/8'
+    nginx.ingress.kubernetes.io/server-snippet: |
+      server_tokens off;
+      location ~ ^/(ping|ready|prometheus) {
+        deny all;
+        return 404;
+      }
 spec:
   ingressClassName: nginx
   rules:

diff --git a/deploy/staging/ingress.yaml b/deploy/staging/ingress.yaml
@@ -3,6 +3,21 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: catalog-view-api
+  annotations:
+    nginx.ingress.kubernetes.io/proxy-buffering: 'on'
+    nginx.ingress.kubernetes.io/limit-rate-after: '15729'
+    nginx.ingress.kubernetes.io/limit-rate: '128'
+    nginx.ingress.kubernetes.io/limit-rpm: '10'
+    nginx.ingress.kubernetes.io/limit-burst-multiplier: '2'
+    nginx.ingress.kubernetes.io/proxy-read-timeout: '60'
+    nginx.ingress.kubernetes.io/proxy-send-timeout: '60'
+    nginx.ingress.kubernetes.io/limit-whitelist: '10.0.0.0/8'
+    nginx.ingress.kubernetes.io/server-snippet: |
+      server_tokens off;
+      location ~ ^/(ping|ready|prometheus) {
+        deny all;
+        return 404;
+      }
 spec:
   ingressClassName: nginx
   rules: