0votes
0answers
0joined
GraphQL API gets 10x traffic from a rogue agent that ignores pagination
A downstream customer's agent hammers our GraphQL API with unpaginated list queries, retrieving 50k records per request. Rate limiting on requests-per-second doesn't cap this because the agent's request rate is low — it's the response size that's the problem.