メインコンテンツまでスキップ
バージョン: 21 R5 BETA

Web サーバークォータ

Web アプリケーションはたくさんの異なるクライアントからリクエストを受信することで、様々なレベルのトラフィックやリソース消費が発生することが有り得ます。適切な制限なしでは、単一または複数のクライアントからの過剰のアクティビティによってWeb サーバーのパフォーマンスや利用可能性に影響を及ぼす可能性があります。 Web サーバークォータを使用して、トラフィック、リクエスト、アクティブなセッション数、ゲストセッション、そしてREST エンティティセットを制約することで、リソースの使用状況を管理することができます。 Web サーバークォータは、グローバルレベル(全てのセッションに対して)、セッションデフォルトレベル(それぞれの新しいセッションに対して)、あるいはカレントのREST セッションレベルにおいて設定することができます。

関連したBlog 記事

A 4D web server that knows when to say No

要件​

クォータの設定のためには、スケーラブルセッション が有効化されている必要があります。

クォータの設定方法​

開始時​

At startup, you can configure quotas in the quotas property passed to WebServer.start() for the host Web server or a component Web server. For the host Web server only, you can also load quotas from an HTTPQuotas.json file stored in the Project/Sources folder.

Using the quotas property​

Quotas can be defined using the quotas property in the settings parameter passed to the start() function.


var $quotas:={}
$quotas.inBytesPerMin:=20000000

WEB Server().start({quotas: $quotas})

Using an HTTPQuotas.json file​

For the host Web server, you can create an HTTPQuotas.json file and store it in the Project/Sources folder. This file is loaded at startup by the host Web server. The file must contain a JSON object whose properties are quota property names:

/Project/Sources/HTTPQuotas.json
{
    "inBytesPerHour": 100000000,
    "inBytesPerHourPerSession": 10000000,
    "nbRequestsPerMin": 1000,
    "nbRequestsPerMinPerSession": 100
}

If the HTTPQuotas.json file contains malformed JSON, the Web server does not start and returns error 551 - JSON malformed.

If settings.quotas is provided when the Web server starts, HTTPQuotas.json is ignored.

At runtime​

For a running Web server, you can update quotas through the WebServer.quotas property. Changes are applied to subsequent Web server activity; session default quotas apply to new sessions created after the quota value is updated.

Current REST session quotas​

The Session.quotas property configures quotas for the current REST session. It provides current usage values and lets you configure the session's REST entity-set limits and timeouts. These quotas are distinct from the session default quotas configured through WebServer.quotas, which are applied when new Web sessions are created.

例題​

The following example configures web server quotas at startup for an internal application used by approximately 20 people with occasional usage:


var $quotas:={}
var $webServer : Object:=WEB Server

// Maximum number of input bytes accepted in a one-minute time window on the web server
$quotas.inBytesPerMin:=20000000

// Maximum number of output bytes sent in a one-minute time window for a session
$quotas.outBytesPerMinPerSession:=10000000

// Maximum number of active sessions on the web server
$quotas.nbSessions:=50

// Maximum number of unauthenticated sessions on the web server
$quotas.nbGuestSessions:=10

// Maximum number of requests accepted in a one-minute time window on the web server
$quotas.nbRequestsPerMin:=500

// Maximum number of requests accepted in a one-hour time window on the web server
$quotas.nbRequestsPerHour:=20000

// We launch the Web server
$webServer.start({quotas: $quotas})

Quota enforcement​

For each incoming request, the Web server checks quotas during preprocessing, before the On Web Connection database method is called (if defined):

  1. If a session quota is configured, it is checked first.
  2. If the request is accepted, the server global quota is checked.
  3. If both checks pass, the request is processed.

If either quota is exceeded, the request is rejected with an HTTP 429 Too Many Requests response. No web process is created and On Web Connection is not called (if defined).

If an output byte quota is exceeded while a response is being sent, the current request is interrupted. The preprocessing rules above apply to the next request in the same time window.

Rate limiting responses​

Rate-limiting quotas use fixed time windows. When a quota is reached, subsequent requests are rejected until the current one-minute or one-hour window ends. The HTTP 429 Too Many Requests response includes a Retry-After header containing the time to wait before sending another request.

When one of concurrent quotas (nbSessions, nbGuestSessions, and nbEntitySetsPerSession) is reached, the response includes an empty Retry-After header until the quota is no longer reached.

The input byte quotas apply to all data received for a request, including its headers and body. The output byte quotas are evaluated against the uncompressed response size, regardless of the Web server compression settings.

Quota values​

Quota limits must be positive integers. An Undefined value means that the quota is not configured and is not enforced. Setting a quota value to zero or a negative number raises an error, and the existing quota value remains unchanged.

Quota counters are stored in memory for each 4D Server instance and are not shared between multiple server instances.

Component Web servers​

Quotas configured for a component Web server apply only to that server and are independent of the quotas configured for the host Web server or other component Web servers.

The HTTPQuotas.json configuration file applies only to the host Web server. Component Web servers must be configured with the Web server .quotas property and/or the session .quotas property.

参照​