Skip to content

Commit

Permalink
ci: enable ratelimiting via traefik
Browse files Browse the repository at this point in the history
As a temporary measure, we've added ratelimiting on the gRPC endpoint
for pd, via Traefik middleware. We plan to add similar ratelimiting
functionality to pd itself, so that solo node operators can benefit from
limited DoS protection. For now, we add this so that a subsequent CI
deploy (e.g. #3784) doesn't remove the protection that's currently live.
  • Loading branch information
conorsch committed Feb 23, 2024
1 parent 8803df9 commit ce7e7de
Showing 1 changed file with 2 additions and 1 deletion.
3 changes: 2 additions & 1 deletion deployments/charts/penumbra-node/values.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -86,7 +86,8 @@ ingressRoute:
secretName: ""
# Traefik middleware CRDs, to be applied to pd's gRPC service.
# These config objects must already exist in the API, i.e. create them out of band.
middlewares: []
middlewares:
- name: ratelimit-pd

# Whether to place the application in "maintenance mode", effectively stopping pd and cometbft,
# allowing an administrator to inspect and munge local state, e.g. to perform a chain upgrade.
Expand Down

0 comments on commit ce7e7de

Please sign in to comment.