My requirement is to expose an api will invalidate all the access token associated with a user id. This requires management api call. As management api runs on management servers I am wondering if i need to set up any quota on this. I am also hesitant to expose such api as if allow the api consumer to call this api too many times, there will some impact on the management servers. Can you please put your thoughts on this?
Solved! Go to Solution.
The API Runtime for Apigee Edge is designed to auto-scale and it will support 1000's or 10's of thousands of requests per second, or more. This means you can build your own custom API proxies and the Apigee Edge runtime will enforce the rules you specify.
The Apigee Edge Management API is not designed to support 1000's or 10's of thousands of requests per second. It is designed to be highly available, but not at that scale of concurrent requests.
It is generally a bad idea to create an API Proxy in the Apigee Edge runtime that depends on an Apigee Edge Management API. However, in some exceptional cases, it may be warranted. Yours may be one of them.
You didn't say how often you expect this API to be called, but if it is expect that your apps will call it relatively rarely, then perhaps it's ok to have this dependency.