Feedback issue: Rate limitation for users of the Projects, Groups and Users API
Context
We are going to rate limit the Projects, Groups and Users API for all users. Self-managed installations of GitLab have the same rate limitation by default, but admins can change the rate limitation as they see fit.
The limits per endpoint are as follows:
Endpoint | Rate limit per user or IP |
---|---|
GET /api/v4/users/:id/followers | 100 requests per minute |
GET /api/v4/users/:id/following | 100 requests per minute |
GET /api/v4/users/:user_id/status | 240 requests per minute |
GET /api/v4/users/:user_id/keys | 120 requests per minute |
GET /api/v4/users/:id/keys/:key_id | 120 requests per minute |
GET /api/v4/users/:id/gpg_keys | 120 requests per minute |
GET /api/v4/users/:id/gpg_keys/:key_id | 120 requests per minute |
GET /api/v4/users/:user_id/projects | 300 requests per minute |
GET /api/v4/users/:user_id/contributed_projects | 100 requests per minute |
GET /api/v4/users/:user_id/starred_projects | 100 requests per minute |
GET /api/v4/projects | 2000 requests per 10 minutes |
GET /api/v4/groups/:id/projects | 600 requests per minute |
GET /api/v4/projects/:id | 400 requests per minute |
GET /api/v4/groups | 200 requests per minute |
GET /api/v4/groups/:id | 400 requests per minute |
See the following issues for more details:
- Rate limit Users API endpoints behind FF (#452349 - closed)
- Implement rate limits for Tenant Scale endpoints (#421909 - closed)
Do you have any feedback about this change?
Please leave your feedback in the comments.
Edited by Christina Lohr