[Threat Modeling] Documentation of the potential impact of rate limiting

[TorstenD-SAP]

Description

Provide a documentation about the disadvantages and potential impact of the way, how rate limiting is implemented in Istio to enable customers to decide if they want to have this.

Reasons

The way how Rate Limiting is implemented can be abused for DoS attacks.

DoD:

• Provide unit and integration tests.
• Provide documentation.
• Verify if the solution works for both open-source Kyma and SAP BTP, Kyma runtime.
• If you changed the resource limits, explain why it was needed.
• If the default configuration of Istio Operator has been changed, you performed a manual upgrade test to verify that the change can be rolled out correctly.
• Verify that your contributions don't decrease code coverage. If they do, explain why this is the case.
• Add release notes.

Attachments

part of: #1365