github
/
k3s
mirror of https://github.com/k3s-io/k3s
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Increase API rate limit on read only port of apiserver

pull/6/head
Satnam Singh 2015-01-30 09:06:47 -08:00
parent 2e9cb5ee3a
commit d8bda4006a
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
cmd/kube-apiserver/apiserver.go
View File

@ -60,8 +60,8 @@ var (
"The port from which to serve read-only resources. If 0, don't serve on a "+ "The port from which to serve read-only resources. If 0, don't serve on a "+
"read-only address. It is assumed that firewall rules are set up such that "+ "read-only address. It is assumed that firewall rules are set up such that "+
"this port is not reachable from outside of the cluster.") "this port is not reachable from outside of the cluster.")
apiRate = flag.Float32("api_rate", 1.0, "API rate limit as QPS for the read only port") apiRate = flag.Float32("api_rate", 10.0, "API rate limit as QPS for the read only port")
apiBurst = flag.Int("api_burst", 20, "API burst amount for the read only port") apiBurst = flag.Int("api_burst", 200, "API burst amount for the read only port")
securePort = flag.Int("secure_port", 8443, "The port from which to serve HTTPS with authentication and authorization. If 0, don't serve HTTPS ") securePort = flag.Int("secure_port", 8443, "The port from which to serve HTTPS with authentication and authorization. If 0, don't serve HTTPS ")
tlsCertFile = flag.String("tls_cert_file", "", ""+ tlsCertFile = flag.String("tls_cert_file", "", ""+
"File containing x509 Certificate for HTTPS. (CA cert, if any, concatenated after server cert). "+ "File containing x509 Certificate for HTTPS. (CA cert, if any, concatenated after server cert). "+
@ -217,7 +217,7 @@ func main() {
// See the flag commentary to understand our assumptions when opening the read-only and read-write ports. // See the flag commentary to understand our assumptions when opening the read-only and read-write ports.
if roLocation != "" { if roLocation != "" {
// Default settings allow 1 read-only request per second, allow up to 20 in a burst before enforcing. // Default settings allow 10 read-only requests per second, allow up to 200 in a burst before enforcing.
rl := util.NewTokenBucketRateLimiter(*apiRate, *apiBurst) rl := util.NewTokenBucketRateLimiter(*apiRate, *apiBurst)
readOnlyServer := &http.Server{ readOnlyServer := &http.Server{
Addr: roLocation, Addr: roLocation,

2
pkg/apiserver/handlers.go
View File

@ -75,7 +75,7 @@ func RateLimit(rl util.RateLimiter, handler http.Handler) http.Handler {
// Return a 429 status indicating "Too Many Requests" // Return a 429 status indicating "Too Many Requests"
w.Header().Set("Retry-After", "1") w.Header().Set("Retry-After", "1")
w.WriteHeader(errors.StatusTooManyRequests) w.WriteHeader(errors.StatusTooManyRequests)
fmt.Fprintf(w, "Rate limit is 1 QPS or a burst of 20") fmt.Fprintf(w, "Rate limit is 10 QPS or a burst of 200")
}) })
} }