Rate-Limiting Policy

[Paul2708]

Hey there!

I am aware that, for example, Envoy provides a rate-limiting filter.
However, I am curious if it is possible to implement a rate-limiting policy in pure Rego somehow.
There is a GitHub issue open-policy-agent/opa#632 mentioning a rate-limiting policy. However, I could not find it in the referred pull request.
Also, I did not find a way to modify an object to keep track of the sent requests.

Has someone already implemented a Rego policy for rate limiting, or is it not possible with OPA and Rego?

Thanks in advance!

Best regards,
Paul

[srenatus]

However, I am curious if it is possible to implement a rate-limiting policy in pure Rego somehow.

No, not with OPA alone. OPA doesn't keep state like it would be required to create a rate-limiting policy. You would need new builtins, or another process to update the OPA store with the required data.

[Paul2708]

Alright, thank you for clarifying it!