You're almost there! Please answer a few more questions for access to the Applications content. Complete registration
Interested in joining? Complete your registration by providing Areas of Interest here. Register

WAF - OCI

in OCI - General

Hi Team,

We have OCI WAF policy attached to OCI load balancer. We have hit 429 errors reported by user.

We reviewed the provided OCI WAF logs and the rate-limiting configuration for the reported HTTP 429 responses.

The configured rate limiting rule has the following settings:

  • Request limit: 1,500 requests
  • Period: 60 seconds
  • Action: HTTP 429 – Too Many Requests
     

Based on the supplied WAF log data, we can identify 451 requests associated with the affected IP before the first observed HTTP 429 response at approximately 05:18:53 UTC (10:48:53 AM IST). The subsequent blocked requests show that the rate limiting rule was matched and HTTP 429 was returned.

However, the 451 requests represent only the requests visible in the supplied log dataset. Since the configured threshold is 1,500 requests within 60 seconds, we cannot conclude that the WAF rate-limiting rule was triggered after only 451 requests.

Tagged:

Howdy, Stranger!

Log In

To view full details, sign in.

Register

Don't have an account? Click here to get started!