docs: update rate limit rules (#5296)

Co-authored-by: Florian Forster <florian@zitadel.com>
This commit is contained in:
Elio Bischof 2023-02-24 18:35:44 +01:00 committed by GitHub
parent f8ddc844f8
commit c4ca72fe68
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -4,15 +4,7 @@ title: ZITADEL Cloud Rate Limits
Rate limits are implemented according to our [rate limit policy](/legal/rate-limit-policy.md) with the following rules:
| Path | Description | Throttling | One Minute Banning |
| Path | Description | Rate Limiting | One Minute Banning |
|--------------------------|----------------------------------------|--------------------------------------|----------------------------------------|
| /ui/login* | Global Login, Register and Reset Limit | 10 requests per second over a minute | 15 requests per sencond over 3 minutes |
| *Various API paths* [^1] | All other gRPC- and REST APIs<br/> - Management API<br/>- Admin API<br/>- Auth API<br/>- System API | 10 requests per second over a minute | 10 requests per second over 3 minutes |
[^1] API paths:
<details>
<summary>Open to see the reqular expression</summary>
<pre>
/openapi/.*|/oauth/v[0-9]+/.*|/saml/v[0-9]+/.*|/oidc/v[0-9]+/.*|/assets/v[0-9]+/.*|/system/v[0-9]+/.*|/auth/v[0-9]+/.|/admin/v[0-9]+/.|/management/v[0-9]+/.*|zitadel\.system\.v[0-9]+\.SystemService/.*|zitadel\.admin\.v[0-9]+\.AdminService/.*|zitadel\.auth\.v[0-9]+\.AuthService/.*|zitadel\.management\.v[0-9]+\.ManagementService/.*
</pre>
</details>
| All other paths | All gRPC- and REST APIs as well as the ZITADEL Customer Portal | 10 requests per second over a minute | 10 requests per second over 3 minutes |