discourse/spec/lib/middleware/processing_request_spec.rb
Alan Guo Xiang Tan 9c781af9d1
PERF: Reject anonymous requests with 503 upon aggressive queuing (#36519)
This commit adds a default protection to all Discourse app which will
turn away all anonymous requests that has queued for more than the
duration configured
by the `reject_anonymous_min_queue_seconds` global setting, 1 second
by default. A queue time of 1 second is a sign that the app is very
overloaded so we are opting to turn away anonymous requests when that
happens.

While there may be better solutions like introducing an adaptive
concurrency limit somewhere in the stack, we like this solution for its
simplicity. We may consider the more complex solutions in the future but
the time is not now.

Other significant changes in this commit:

1. Moved setting of the `REQUEST_QUEUE_SECONDS` key in `env` to
   `Middleware::ProcessingRequest`.
2. Introduction of the `reject_anonymous_min_queue_seconds` global
   Setting.
2025-12-18 10:23:42 +08:00

21 lines
796 B
Ruby

# frozen_string_literal: true
RSpec.describe Middleware::ProcessingRequest do
let(:app) { described_class.new(lambda { |env| [200, {}, ["ok"]] }) }
describe "#call" do
it "sets the request queue seconds in the env based on the HTTP-X-REQUEST-START header" do
env = create_request_env.merge("HTTP_X_REQUEST_START" => "t=#{(Time.now.to_f - 2)}")
_status, _headers, _body = app.call(env)
expect(env[described_class::REQUEST_QUEUE_SECONDS_ENV_KEY]).to be_within(0.1).of(2.0)
end
it "does not set the request queue seconds in the env if the HTTP-X-REQUEST-START header is missing" do
env = create_request_env
_status, _headers, _body = app.call(env)
expect(env).not_to have_key(described_class::REQUEST_QUEUE_SECONDS_ENV_KEY)
end
end
end