How to protect our backend when multiple proxies uses it

[alfsalim-1]

Its a classical scenario, multiple proxies uses the same backend, how can we protected the backed from high traffic/volume ? Spike arrest is set at proxy level (but applies at MP scope) but the value can change from one proxy to another, even if we have a proper governance, we may still not necessary having a consistent way to set the parameter. What I am suggesting is to create one single proxy per backend, all proxies will need to call that single backend proxy, everything is centrlized and spike arrest or concurrentLimit make sens here (one proxy per MP). is this a good pattern ? what is the prons and cons ?

Thank you

[mark_hammelman]

I think what you describe is a good pattern. You could use proxy-chaining (https://docs.apigee.com/api-platform/fundamentals/connecting-proxies-other-proxies) to link your multiple client-facing proxies to the "single backend proxy" to avoid a network hop.