Rate limiting & WAF

A step of the Cloud application tree on Gradus, in the Security area: Secrets, auth, TLS, input.

Add rate limiting per caller and a web application firewall in front of public endpoints, so abuse is throttled before it reaches the code.

Usually comes after: TLS & network policy.

Prompt for your AI assistant

Add per-client rate limiting to the public endpoints of this application and configure a web application firewall or equivalent edge rules for common attack patterns, then check that link preview crawlers and search engines still get through.

• Show on map
• This step as Markdown
• Every step of the tree, for AI assistants

This is https://gradus.kazet.blog/tree/cloud-application/step/rate-limiting as plain HTML. In a browser the page also lets you mark the step forged and copy a message for your AI assistant.