Demonstrating rate-limiting setup for the exposed public route (HapiJS)

customerRoutes.js

/*
 * This is one of the few public routes in the project.
 * This particular route is accepting unauthenticated POST requests 
 * from a remote server.
 * As such, this route is specifically rate-limited to 120 requests per hour 
 * in order to mitigate flooding.
 */
server.route({
    method: 'POST',
    path: `${path}/remote`,
    config: {
        auth: false,
        handler: (req, reply) => ctrl.create(req, reply),
        validate: {
            payload: validations.payload.create,
            options: { stripUnknown: true }
        },
        plugins: {
            // Rate-limits this route to 120 requests per hour
            'hapi-rate-limit': {
                userPathLimit: 120,
                userPathCache: {
                    // Name of the cache segment to use for storing userPath rate limit info
                    segment: 'hapi-rate-limit-userPath-newCustomer',
                    // Time (in milliseconds) of period for userPathLimit
                    expiresIn: 60 * 60 * 1000 // 1 hour
                },
            }
        }
    },
});