Why Doesn't Parse-Server Have Rate Limiting?

[noder199]

I understand that technically rate limiting is possible via cloud code, but it would be great to have it built-in to parse-server. For instance, the setting could be described as: "If a user (or IP address) is submitting more than 1 request per __ seconds, then return an error."

Please look into this. Thanks.

[flovilmart]

You Can easily achieve this with HAProxy rate limiting or nginx rate limiting.

Note that implementing the feature at the application level won't prevent the saturation of the number of open connections to your server nor the consumed bandwidth, this is why, we usually place that security feature in the load balances, to prevent the request coming to the application server itself.

[noder199]

@flovilmart Thanks, that is great to know!

I am actually using Google App Engine, it looks like it does not currently support rate limiting. Azure does though. Not sure about AWS Elastic Beanstalk.

I found out that for my particular scenario (a user creating tons of accounts), what I actually needed were dynamic IP address restrictions. Both Azure and AWS support this.