kyma-project / istio

Apache License 2.0
2 stars 18 forks source link

Rate limiting #773

Open strekm opened 2 months ago

strekm commented 2 months ago

Description

Istio module should support rate limiting. New CRD should be introduced to support rate limiting configuration. User should be able to limit access to given workload based on caller ID, custom header or client certificate. Introduced CRD should hide complexity of EnvoyFilters.

TODO:

Reasons

Attachments https://istio.io/latest/docs/tasks/policy-enforcement/rate-limit/ https://github.com/kyma-project/kyma/issues/17572 https://killercoda.com/interactive-kyma/scenario/rate-limit

strekm commented 2 weeks ago

We are still doing research and POC around Envoy global rate limit service