chore: tweak rate limits

Author: NathanFlurry

cloud/packages/ci-runner/Dockerfile

@@ -1,7 +1,7 @@
 FROM alpine:latest AS builder
 
 # FROM gcr.io/kaniko-project/executor:latest
-FROM ghcr.io/rivet-gg/executor@sha256:439d4dbb0f3f8c1c6c2195e144d29195b4930b87166a6fae32061b564a6baa9e
+FROM ghcr.io/rivet-dev/executor@sha256:439d4dbb0f3f8c1c6c2195e144d29195b4930b87166a6fae32061b564a6baa9e
 COPY --from=builder /bin/sh /bin/sh
 COPY --from=builder /lib/ld-musl-x86_64.so.1 /lib/ld-musl-x86_64.so.1
 

packages/common/api-helper/build/src/util.rs

@@ -289,43 +289,43 @@ pub async fn basic_rate_limit(
 	config: &rivet_config::Config,
 	rate_limit_ctx: crate::auth::AuthRateLimitCtx<'_>,
 ) -> GlobalResult<()> {
-	if let Some(remote_address) = rate_limit_ctx.remote_address {
-		let rate_limit_config = rate_limit_ctx.rate_limit_config;
-
-		// Trigger rate limit
-		let rate_limit_key = rate_limit_config.key.to_owned();
-		let rate_limit_results = rate_limit_ctx
-			.cache
-			.rate_limit(
-				&("req", rate_limit_config.key.to_owned()),
-				&remote_address.to_string(),
-				rate_limit_config,
-			)
-			.await;
-
-		// Decode bypass token
-		if let Some(bypass_token) = rate_limit_ctx.bypass_token {
-			as_auth_expired(rivet_claims::decode(
-				&config.server()?.jwt.public,
-				&bypass_token,
-			)?)?
-			.as_bypass()?;
-		}
-		// Handle rate limiting
-		else if let Some(rate_limit_result) = rate_limit_results.iter().find(|res| !res.is_valid)
-		{
-			tracing::info!(
-				?remote_address,
-				?rate_limit_key,
-				result=%rate_limit_result,
-				"too many requests"
-			);
-
-			return Err(err_code!(API_RATE_LIMIT {
-				metadata: rate_limit_result.retry_after_ts(),
-			}));
-		}
-	}
+	// if let Some(remote_address) = rate_limit_ctx.remote_address {
+	// 	let rate_limit_config = rate_limit_ctx.rate_limit_config;
+	//
+	// 	// Trigger rate limit
+	// 	let rate_limit_key = rate_limit_config.key.to_owned();
+	// 	let rate_limit_results = rate_limit_ctx
+	// 		.cache
+	// 		.rate_limit(
+	// 			&("req", rate_limit_config.key.to_owned()),
+	// 			&remote_address.to_string(),
+	// 			rate_limit_config,
+	// 		)
+	// 		.await;
+	//
+	// 	// Decode bypass token
+	// 	if let Some(bypass_token) = rate_limit_ctx.bypass_token {
+	// 		as_auth_expired(rivet_claims::decode(
+	// 			&config.server()?.jwt.public,
+	// 			&bypass_token,
+	// 		)?)?
+	// 		.as_bypass()?;
+	// 	}
+	// 	// Handle rate limiting
+	// 	else if let Some(rate_limit_result) = rate_limit_results.iter().find(|res| !res.is_valid)
+	// 	{
+	// 		tracing::info!(
+	// 			?remote_address,
+	// 			?rate_limit_key,
+	// 			result=%rate_limit_result,
+	// 			"too many requests"
+	// 		);
+	//
+	// 		return Err(err_code!(API_RATE_LIMIT {
+	// 			metadata: rate_limit_result.retry_after_ts(),
+	// 		}));
+	// 	}
+	// }
 
 	Ok(())
 }

packages/common/chirp-workflow/core/src/db/fdb_sqlite_nats/mod.rs

@@ -369,6 +369,8 @@ impl Database for DatabaseFdbSqliteNats {
 
 	#[tracing::instrument(skip_all)]
 	async fn publish_metrics(&self, _worker_instance_id: Uuid) -> WorkflowResult<()> {
+		return Ok(());
+
 		// Attempt to be the only worker publishing metrics by writing to the lock key
 		let acquired_lock = self
 			.pools

packages/core/services/cluster/src/workflows/server/install/install_scripts/components/traffic_server.rs

@@ -3,7 +3,7 @@ use include_dir::{include_dir, Dir};
 
 use super::s3;
 
-const TRAFFIC_SERVER_IMAGE: &str = "ghcr.io/rivet-gg/apache-traffic-server:9934dc2";
+const TRAFFIC_SERVER_IMAGE: &str = "ghcr.io/rivet-dev/apache-traffic-server:9934dc2";
 
 pub fn install() -> String {
 	include_str!("../files/traffic_server_install.sh").replace("__IMAGE__", TRAFFIC_SERVER_IMAGE)

packages/edge/api/actor/src/route/mod.rs

@@ -50,7 +50,7 @@ define_router! {
 				opt_auth: true,
 				rate_limit: {
 					buckets: [
-						{ count: 10_000, bucket: duration::minutes(1) },
+						{ count: 10_000_000, bucket: duration::minutes(1) },
 					],
 				},
 			),
@@ -60,7 +60,7 @@ define_router! {
 				opt_auth: true,
 				rate_limit: {
 					buckets: [
-						{ count: 10_000, bucket: duration::minutes(1) },
+						{ count: 10_000_000, bucket: duration::minutes(1) },
 					],
 				},
 			),
@@ -73,7 +73,7 @@ define_router! {
 				opt_auth: true,
 				rate_limit: {
 					buckets: [
-						{ count: 10_000, bucket: duration::minutes(1) },
+						{ count: 10_000_000, bucket: duration::minutes(1) },
 					],
 				},
 			),
@@ -95,7 +95,7 @@ define_router! {
 				opt_auth: true,
 				rate_limit: {
 					buckets: [
-						{ count: 10_000, bucket: duration::minutes(1) },
+						{ count: 10_000_000, bucket: duration::minutes(1) },
 					],
 				},
 			),
@@ -108,7 +108,7 @@ define_router! {
 				opt_auth: true,
 				rate_limit: {
 					buckets: [
-						{ count: 10_000, bucket: duration::minutes(1) },
+						{ count: 10_000_000, bucket: duration::minutes(1) },
 					],
 				},
 			),

packages/edge/infra/guard/server/src/main.rs

@@ -128,11 +128,11 @@ fn create_middleware_function(
 			// This could be fetched from a database in a real implementation
 			Ok(MiddlewareResponse::Ok(MiddlewareConfig {
 				rate_limit: RateLimitConfig {
-					requests: 100, // 100 requests
+					requests: 100_000, // 100 requests
 					period: 60,    // per 60 seconds
 				},
 				max_in_flight: MaxInFlightConfig {
-					amount: 20, // 20 concurrent requests
+					amount: 20_000, // 20 concurrent requests
 				},
 				retry: RetryConfig {
 					max_attempts: 7,