Request Limiter listener config opt-out (#25098)

This commit introduces a new listener config option to allow disabling the request limiter per-listener.
This commit is contained in:
Mike Palmiotto
2024-01-26 15:24:32 -05:00
committed by GitHub
parent dc9d1e275d
commit 12f69a8ce5
10 changed files with 94 additions and 13 deletions

View File

@@ -611,6 +611,7 @@ func testLoadConfigFile_json(t *testing.T) {
Type: "tcp",
Address: "127.0.0.1:443",
CustomResponseHeaders: DefaultCustomHeaders,
DisableRequestLimiter: false,
},
},
@@ -789,8 +790,9 @@ func testConfig_Sanitized(t *testing.T) {
"listeners": []interface{}{
map[string]interface{}{
"config": map[string]interface{}{
"address": "127.0.0.1:443",
"chroot_namespace": "admin/",
"address": "127.0.0.1:443",
"chroot_namespace": "admin/",
"disable_request_limiter": false,
},
"type": configutil.TCP,
},
@@ -889,6 +891,7 @@ listener "tcp" {
redact_addresses = true
redact_cluster_name = true
redact_version = true
disable_request_limiter = true
}
listener "unix" {
address = "/var/run/vault.sock"
@@ -951,6 +954,7 @@ listener "unix" {
RedactAddresses: true,
RedactClusterName: true,
RedactVersion: true,
DisableRequestLimiter: true,
},
{
Type: "unix",

View File

@@ -13,6 +13,7 @@ cluster_addr = "top_level_cluster_addr"
listener "tcp" {
address = "127.0.0.1:443"
chroot_namespace="admin/"
disable_request_limiter = false
}
backend "consul" {