chore: add rate limiting to openshift frontend routes (#2232)

bcgov · Jan 10, 2025 · 9f80c62 · 9f80c62
1 parent af7a932
commit 9f80c62
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/charts/app/values.yaml b/charts/app/values.yaml
@@ -107,6 +107,11 @@ frontend:
   ingress:
     annotations:
       route.openshift.io/termination: "edge"
+      haproxy.router.openshift.io/rate-limit-connections: "true"
+      haproxy.router.openshift.io/rate-limit-connections.concurrent-tcp: "10"
+      haproxy.router.openshift.io/rate-limit-connections.rate-http: "20"
+      haproxy.router.openshift.io/rate-limit-connections.rate-tcp: "50"
+      haproxy.router.openshift.io/disable_cookies: "true"
   pdb:
     enabled: false # enable it in PRODUCTION for having pod disruption budget.
     minAvailable: 1 # the minimum number of pods that must be available during the disruption budget.