Closed Bug 1441858 Opened 7 years ago Closed 6 years ago

Rate limit Lando UI and API

Categories

(Conduit :: Lando, enhancement)

enhancement
Not set
normal

Tracking

(Not tracked)

RESOLVED WONTFIX

People

(Reporter: imadueme, Unassigned)

Details

(Keywords: conduit-story, conduit-triaged)

Lando UI/API will currently try it's hardest to serve any request. To make this worse, Lando is really slow because of all the network requests to Phabricator and JSON parsing done. We can fix performance in the future, but, even still it would be best to have simple rate limiting in place. How this looks and how it is implemented is left to be discussed. I think it should allow things like opening recent tabs with 10+ lando pages all at once, but, not allow things far beyond that.
Do you think this is necessary for pre-release? Someone could easily take lando out of service but I guess they wouldn't be able to land anything malicious.
Flags: needinfo?(mcote)
No, the requirement for pre-release is that no malicious actions can result in bad code landing.
Flags: needinfo?(mcote)
No longer blocks: 1441728
Blocks: 1443579
Keywords: conduit-story
No longer blocks: 1443579
Keywords: conduit-story
After discussing with ops, rather than doing anything custom in the app, we'll work with them if and when anything abusive happens.
Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → WONTFIX
You need to log in before you can comment on or make changes to this bug.