1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
|
---
stage: Data Stores
group: Tenant Scale
info: To determine the technical writer assigned to the Stage/Group associated with this page, see https://handbook.gitlab.com/handbook/product/ux/technical-writing/#assignments
---
# Rate limit on Groups API
DETAILS:
**Tier:** Free, Premium, Ultimate
**Offering:** Self-managed
> - Rate limit for groups and projects API [introduced](https://gitlab.com/gitlab-org/gitlab/-/merge_requests/152733) in GitLab 17.1. with a [flag](../feature_flags.md) named `rate_limit_groups_and_projects_api`. Disabled by default.
You can configure the per minute rate limit per IP address and per user for requests to the following [groups API](../../api/groups.md).
| Limit | Default |
|---------------------------------------------------------------|---------|
| [GET /groups](../../api/groups.md#list-groups) | 200 |
| [GET /groups/:id](../../api/groups.md#get-a-single-group) | 400 |
| [GET /groups/:id/projects](../../api/groups.md#list-projects) | 600 |
To change the rate limit:
1. On the left sidebar, at the bottom, select **Admin**.
1. Select **Settings > Network**.
1. Expand **Groups API rate limits**.
1. Change the value of any rate limit. The rate limits are per minute per user for authenticated requests and per IP address unauthenticated requests.
Set to `0` to disable a rate limit.
1. Select **Save changes**.
The rate limits:
- Apply per user if the user is authenticated.
- Apply per IP address if the user is unauthenticated.
- Can be set to 0 to disable rate limiting.
- Are behind the `rate_limit_groups_and_projects_api`.
Requests over the rate limit are logged into the `auth.log` file.
For example, if you set a limit of 400 for `GET /groups/:id`, requests to the API endpoint that
exceed a rate of 400 within 1 minutes are blocked. Access to the endpoint is restored after one minutes have elapsed.
|
