Rate Limiting works incorrectly if PeriodTimespan value is greater than Period

Expected Behavior

Rate Limiting works as documented for such parameter values: Period: 1 second PeriodTimeSpan: 30 seconds Limit: 100

Scenario: Request flow, 10-20 requests per sec, should be allowed.

Status: not equal to 429

Actual Behavior / Motivation for New Feature

With the same parameter values from Expected Behavior Ocelot returns status 429 aka “Rate limit exceeded”. It seems this issue caused by code in RateLimitCore.cs lines 35-43

// entry has not expired
if (entry.Value.Timestamp + TimeSpan.FromSeconds(rule.PeriodTimespan) >= DateTime.UtcNow)
{
    // increment request count
    var totalRequests = entry.Value.TotalRequests + 1;

    // deep copy
    counter = new RateLimitCounter(entry.Value.Timestamp, totalRequests);
}

Ocelot increments request counter if request has been received in interval [FirstRequestTime : FirstRequestTime + PeriodTimeSpan] According to the documentation counter should be incremented if request is in interval [FirstRequestTime : FirstRequestTime + Period].

Steps to Reproduce the Problem

1. Set Rate Limiting configuration parameters:

• Period: 1 second
• PeriodTimeSpan: 30 seconds
• Limit: 100

1. Generate a consequent request flow (10-20 requests per second) for more than 12 seconds
2. Ensure Ocelot returns status 429

Specifications

• Ocelot Version: Latest, 19.0.2
• Feature: Rate Limiting

[sergio-str]

I think yes. But give me a little time, please, to dive into the context. Also I apologize for inacurate title.

[raman-m]

@sergio-str Sergii

I would like your checking this bug for the latest build/version which is 19.0.2 and .NET 7. Your reported Specifications info with “Ocelot Version: 18” is quite outdated. Please, use the latest package and/or just use top commits from develop branch version!

Do not you mind if I change Ocelot Version to 19.0.2 in Specifications paragraph? That’s how I and team can accept this bug after our common validation. And the team will not accept bugs for old versions, because of outdating.