API Gateway: Assist to Configure Rate-Limiting on Inbound Traffic Policy

Products

• CA API Gateway

Issue/Introduction

We have a requirement to limit the number of requests a user can make on a particular service to 5000/day for inbound traffic.

Environment

All supported versions of the API Gateway

Resolution

Use the Apply Throughput Quota Assertion:

https://techdocs.broadcom.com/us/en/ca-enterprise-software/layer7-api-management/api-gateway/10-1/policy-assertions/assertion-palette/service-availability-assertions/apply-throughput-quota-assertion.html 

Additional Information

Attached are two sample policies of the ATPQ Assertion for:

1. Requests made by an authenticated user

2. Requests made by an IP address