Reports

I have resolved the issue with rate limiting for POST requests in my Spring Cloud Gateway application. The problem was that rate limiting requires an identifier for the entity accessing the gateway. For authenticated requests, this identifier is provided automatically. However, for POST requests without authentication, the gateway lacks this identifier and consequently blocks the requests.

Implement Custom KeyResolver

@Bean
public KeyResolver userKeyResolver() {
    return exchange -> Mono.just(exchange.getRequest().getRemoteAddress().getAddress().getHostAddress());
}

Then specify the KeyResolver in your configuration:

spring:
  cloud:
    gateway:
      default-filters:
        - TokenRelay=
        - name: RequestRateLimiter
          args:
            key-resolver: "#{@userKeyResolver}"
            redis-rate-limiter.replenishRate: 1
            redis-rate-limiter.burstCapacity: 1

79159731