8 ms·
As a software engineer who has been woken up in the middle of the night while oncall because some random user wanted to run their own performance tests against
by mattm 6y ago
As a software engineer who has been woken up in the middle of the night while oncall because some random user wanted to run their own performance tests against our system, I can completely understand why companies want to prevent this from happening without their awareness.
- jiggawatts 6y agoa) That's not the reason. b) Rate limiting is practically mandatory in an era of multi-gigabit client network connections on even mobile phones. Remember: It's not a DDoS attack if it's one user.
- smarx007 6y agoWell, an "average" HN user may use something like a load testing tool such as https://github.com/loadimpact/k6 https://github.com/loadimpact/k6 or at least rent a few VMs with 10Gbps links for a few hours and use wrk/ab so I would not be so sure about (a). Edit: oh, and then they might dust off that Kali Linux VM lying around somewhere...
- jiggawatts 6y agoWhich ought not to matter if you use a CDN and use basic source-IP based rate limiting.
- chrisandchris 6y agoI agree but there‘s a major difference between benchmarking a tool and writing about how slow a tool is. I agree with the first being forbidden, but the lather should be allowed. For Atlassian Cloud, you won‘t beed a benchmark to tell it‘s slow. A simple (physical) stopwatch is enough.