Skip to content

Implement dynamic tier-based rate limiting#1569

Merged
netomi merged 3 commits intomasterfrom
rate-limiting
Feb 16, 2026
Merged

Implement dynamic tier-based rate limiting#1569
netomi merged 3 commits intomasterfrom
rate-limiting

Conversation

@netomi
Copy link
Contributor

@netomi netomi commented Jan 28, 2026

This fixes EclipseFdn/open-vsx.org#6457.

It adds dynamic tier-based rate limiting capabilities to openvsx.

Rate limits are based on identities:

  • publishers via access tokens
  • customers via CIDR blocks
  • web users with an active session
  • anonymous users for anything else

Administrators can define Tiers and assign them to customers. The rate limit defined for the Tier will apply for requests that are coming from specific customers if they match one of the configured CIDR blocks of the customer. Additionally, free and safety tiers can be defined that will apply:

  • free tier for requests from non-customers
  • safety tier: applies to any request and can be used as a safety measure to ensure availability of the service as a whole

@netomi netomi changed the title Rate limiting Implement dynamic tier-based rate limiting Jan 28, 2026
@netomi netomi added the snapshot Pull requests with that label will automatically build and publish snapshot images label Jan 28, 2026
@netomi netomi force-pushed the rate-limiting branch 2 times, most recently from fae9377 to 0cc77ce Compare February 13, 2026 12:03
@netomi netomi marked this pull request as ready for review February 14, 2026 06:38
@netomi netomi self-assigned this Feb 16, 2026
@netomi netomi merged commit 10ebf70 into master Feb 16, 2026
7 checks passed
@netomi netomi deleted the rate-limiting branch February 16, 2026 13:58
@netomi netomi restored the rate-limiting branch February 16, 2026 20:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

snapshot Pull requests with that label will automatically build and publish snapshot images

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Rate limiting — Phase 1 (Free tier enforcement + usage tracking)

1 participant