Is it possible to the rate limit based on the request headers

[#1]

Hi,

I would like to know is it possible to the rate limiting based on the request headers creation in the API call.

[anilsr]

Dear @sargurunathan,

Welcome to Apigee Community. Yes, Its possible using out of the box rate limiting policies. It's available as a basic functionality in Apigee Rate limiting policies. For example,

You can rate limit access to APIs based on assigned quota using Quota policy. You can rate limit quota counter based on variables like request headers using <Identifier> property

<Identifier ref="request.header.headername"/>

Similarly, You can rate limit & smoothen traffic to prevent DOS attacks using Spike Arrest policy . You can protect your backend using concurrent rate limit policy.concurrent rate limit policy.

Find example quota policy below that sets Quota Rate limiting based on header param customVariable,

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<Quota async="false" continueOnError="false" enabled="true" name="Quota-1">
    <DisplayName>Quota-1</DisplayName>
    <Properties/>
    <Allow count="10" countRef="request.header.allowed_quota"/>
    <Identifier ref="request.header.customVariable"/>
    <Interval ref="request.header.quota_count">1</Interval>
    <Distributed>false</Distributed>
    <Synchronous>false</Synchronous>
    <TimeUnit ref="request.header.quota_timeout">month</TimeUnit>
</Quota>

Keep us posted if you have any further queries / need any examples.