simPRO API Forum

I saw the announcement about rate limiting. Seems reasonable but I have a few questions:

• Will this be turned on in test for a time first?

• When is the change scheduled for production?

• If you only base it on IP address, how do you distinguish between calls coming from a hosted cloud service? Azure Logic Apps has a "small" range of IP addresses so just using IP address won't work

Hi, will this also be an issue for private cloud builds?

Hi Simon and Michelle,
Good questions, happy to provide more info.

Our plan is to enable it for the sandbox builds first, but no firm date has been set. We'll communicate when that is sured up, it is likely to be in the next couple of months.

Regarding the IP address, as mentioned in the announcement, the reason we are doing this is to simply protect our services, not limit a specific application/integration. So if we see integrations spreading their load across multiple IP addresses, each of which stays under the limit, but as a whole they go over and it causes issues then we'll refine our rate limiting to take that into account. We don't want to come in with a too heavy approach to begin with, just stop the top 1% of abuse. Hopefully this initial approach will be sufficient and we don't need to add further limits.

And finally, with regards to private clouds (those ending with .simprocloud.com), they will not be rate limited at all. Only the public cloud environment (those ending with .simprosuite.com) is rate limited.

API rate limiting has been enabled on the sandbox environments now for testing purposes. There is still no firm date on public production environments being rate limited.