Local rate limit
Local rate limiting architecture overview
This filter should be configured with the type URL
The token bucket is shared across all workers, thus the rate limits are applied per Envoy process.
Global rate limiting on network layer is also supported via the global rate limit network filter.
The local rate limit filter applies a token bucket rate limit to incoming sockets that are processed by the filter’s filter chain. Each socket processed by the filter utilizes a single token, and if no tokens are available, the socket will be immediately closed without further filter iteration.
In the current implementation each filter and filter chain has an independent rate limit.
Every configured local rate limit filter has statistics rooted at listener_local_ratelimit.<stat_prefix>. with the following statistics:
Total sockets that have been closed due to rate limit exceeded
The local rate limit filter can be runtime feature flagged via the enabled configuration field.