[CLOUDSTACK-618] API request throttling to avoid malicious attacks on MS per account through frequent API request.

• Type: New Feature
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: pre-4.0.0, 4.0.0
• Fix Version/s: 4.1.0
• Component/s: API
• Security Level: Public (Anyone can view this level - this is the default.)
• Assignee: Min Chen
• Reporter: Min Chen
• Due: 31/Mar/13
• Created: 12/Dec/12 18:45
• Updated: 22/Mar/13 19:58
• Resolved: 31/Jan/13 18:33

Description

We should limit number of APIs placed per second for one account to avoid malicious attacks on our management server and provide fairness to all CS accounts.

Release Planning:
Dev list discussion: http://markmail.org/message/iwb7eyjph625dinl
Functional spec: https://cwiki.apache.org/confluence/display/CLOUDSTACK/API+Request+Throttling
Feature branch: api_limit

Progress: Code complete and merged into master.

Sub-Tasks

• Document Limit API Queries: Closed
• QA API request throttling feature: Closed