Return-Path: X-Original-To: apmail-incubator-cloudstack-dev-archive@minotaur.apache.org Delivered-To: apmail-incubator-cloudstack-dev-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 2E8B9E160 for ; Thu, 31 Jan 2013 18:35:13 +0000 (UTC) Received: (qmail 98858 invoked by uid 500); 31 Jan 2013 18:35:12 -0000 Delivered-To: apmail-incubator-cloudstack-dev-archive@incubator.apache.org Received: (qmail 98811 invoked by uid 500); 31 Jan 2013 18:35:12 -0000 Mailing-List: contact cloudstack-dev-help@incubator.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: cloudstack-dev@incubator.apache.org Delivered-To: mailing list cloudstack-dev@incubator.apache.org Received: (qmail 98802 invoked by uid 99); 31 Jan 2013 18:35:12 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 31 Jan 2013 18:35:12 +0000 Date: Thu, 31 Jan 2013 18:35:12 +0000 (UTC) From: "Min Chen (JIRA)" To: cloudstack-dev@incubator.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Resolved] (CLOUDSTACK-618) API request throttling to avoid malicious attacks on MS per account through frequent API request. MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/CLOUDSTACK-618?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Min Chen resolved CLOUDSTACK-618. --------------------------------- Resolution: Fixed > API request throttling to avoid malicious attacks on MS per account through frequent API request. > ------------------------------------------------------------------------------------------------- > > Key: CLOUDSTACK-618 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-618 > Project: CloudStack > Issue Type: New Feature > Security Level: Public(Anyone can view this level - this is the default.) > Components: API > Affects Versions: pre-4.0.0, 4.0.0 > Reporter: Min Chen > Assignee: Min Chen > Fix For: 4.1.0 > > > We should limit number of APIs placed per second for one account to avoid malicious attacks on our management server and provide fairness to all CS accounts. > Release Planning: > Dev list discussion: http://markmail.org/message/iwb7eyjph625dinl > Functional spec: https://cwiki.apache.org/confluence/display/CLOUDSTACK/API+Request+Throttling > Feature branch: api_limit > Progress: Code complete and merged into master. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira