Skip to Main Content

Cloud Connectivity

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

Interested in getting your voice heard by members of the Developer Marketing team at Oracle? Check out this post for AppDev or this post for AI focus group information.

Error: Too Many Requests - should / can I add WAF ? Reference Architecture correct ?

Jim DicksonApr 20 2025 — edited Apr 20 2025

I have a simple LoadBalancer, custom ORDS for APEX in ADB-S - all Free tier

DNS / certificates appear to work ok.

In browser using APEX app, I see Error: Too Many Requests

But no idea what generates this error (DB, APEX, ORDS, LB )

How do I debug this ? Are there logs I should be reviewing ?

I come from a database background and have basic knowledge of networking etc so using terminology below that I barely understand :)

Suspect excessive requests are caused by random network probing/attacks - how could I prove/disprove this?

If proven, would adding WAF help ?

NB WAF not on Reference Architecture(s) - does list NSG which seems to be yet another kind of firewall

https://docs.oracle.com/en/solutions/deploy-autonomous-database-and-app/index.html#GUID-40A628D0-7A04-42EA-A07E-A3FCC4248DBF

https://docs.oracle.com/en/solutions/deploy-ords-ha-oci/index.html#GUID-A6EBA585-B388-46E1-84E4-AE99BCA5CFB4

If so, what is implication of this WAF doc

https://docs.oracle.com/en-us/iaas/Content/WAF/Policies/getting_started_with_waf-policies.htm

  • WAF policy supports IPv6. WAF policy is attached directly to the load balancer where you can select IPv6 Support.

    After you create a load balancer and choose the type, select Enable IPv6 Address Assignment.

    When you create a load balancer, you can choose to use an IPv4/IPv6 dual-stack configuration. When you choose the IPv6 option, the Load Balancer service assigns both an IPv4 and an IPv6 address to the load balancer. The load balancer receives client traffic sent to the assigned IPv6 address. The load balancer uses only IPv4 addresses to communicate with backend servers. No IPv6 communication exists between the load balancer and the backend servers.

    Note

    IPv6 address assignment occurs only during load balancer creation. You can't assign an IPv6 address to an existing load balancer

i.e. my LB has public IPv4 address. What are implications of creating new LB in Free Tier

- do I create 2nd LB, get charged temporarily, then delete 1st LB and then all free again ?
- can I “export” settings from LB1 to LB2 ? I had enough trouble setting up LB1 I really don't want/know how to setup LB again from scratch :(

Comments
Post Details
Added on Apr 20 2025
2 comments
91 views