rate limiting not working in Essex

[Christian Berendt]

I configured the rate limits for nova-api in api-paste.ini by adding the line limits to the filter ratelimit. The filter ratelimit is used in composite:openstack_compute_api_v2 and composite:openstack_compute_api_v1 for keystone (using auth_strategy=keystone in nova.conf).

limits = ("POST", "*", ".*", 10, DAY);("POST", "*/servers", "^/servers", 10, DAY);("PUT", "*", ".*", 10, DAY);("GET", "*", ".*", 10, DAY);("DELETE", "*", ".*", 10, DAY)

I can receive the new rates using nova rate-limits. Looks good.

$ nova.sh rate-limits
+----------+-------------+-------+--------+------+----------------------+
| Verb | URI | Value | Remain | Unit | Next_Available |
+----------+-------------+-------+--------+------+----------------------+
| "DELETE" | "*" | 10 | 10 | DAY | 2012-07-03T20:31:15Z |
| "GET" | "*" | 10 | 10 | DAY | 2012-07-03T20:31:15Z |
| "POST" | "*" | 10 | 10 | DAY | 2012-07-03T20:31:15Z |
| "POST" | "*/servers" | 10 | 10 | DAY | 2012-07-03T20:31:15Z |
| "PUT" | "*" | 10 | 10 | DAY | 2012-07-03T20:31:15Z |
+----------+-------------+-------+--------+------+----------------------+

But if I now use the Nova API the rate limits doesn't change. For example if I call nova list I receive a GET request on nova-api, but the counter "Remain" is still 10. Rate limiting is activated in nova.conf with api_rate_limit=true.

Any idea why nova.api.openstack.compute.limits:RateLimitingMiddleware.factory got loaded and inititialized but is not working?

[Mark McLoughlin (markmc)]

Christian: could you try this:

  (POST, *, .*, 10, DAY);(POST, */servers, ^/servers, 10, DAY);(PUT, *, .*, 10, DAY);(GET, *, .*, 10, DAY);(DELETE, *, .*, 10, DAY)

Pretty sure that's the issue