Rate & Quota Policy Template v2.0.5-full - is causing all the service calls to fail with 403

Products

• CA API Developer Portal
• CA API Gateway

Issue/Introduction

After applying  this template Rate & Quota Policy Template v2.0.5-full this week all the service calls were returning 403 except /oauth/token service

 

Environment

Portal 5.3.1 Gateway 11.1.1

Cause

Portal Rate & Quota Policy Template v2.0.5 added the new feature “Apply Distributed Rate Limit Assertion (DRL)”  

Customer using Redis as external quota storage for “Apply Throughput Quota Assertion”  but not for Rate Limit which is what the new DRL uses

Customer also has customized policy which was not handling this use case 

Resolution

Need to add sharedRateLimiterProvider to the system.properties

# Configuration properties for shared state extensions.

# com.l7tech.server.extension.sharedKeyValueStoreProvider=embeddedhazelcast

com.l7tech.server.extension.sharedKeyValueStoreProvider=redis

com.l7tech.server.extension.sharedCounterProvider=redis

com.l7tech.server.extension.sharedClusterInfoProvider=ssgdb

 

Added

com.l7tech.server.extension.sharedRateLimiterProvider=redis