Research on Access Restriction Security Mechanisms in Service Governance Scenarios

This paper proposes a control method for API distributed flow limiting, which belongs to the field of network financial transactions. Configure the interface and user level access restriction rules into the database according to the frequency of restriction; After receiving API requests from users on the server, perform signature verification on API parameters; After verification, based on the user identification key in the API parameters, use Realm in the current limiting component to query the current limiting strategy corresponding to the user and the ordering interface; Obtain the user level and interface level flow limiting tokens in the Redis cluster through the Redis Lua script; Determine whether this interface call complies with the user's interface permissions and flow restrictions. This paper solves the problems of low server performance, mismatched interfaces, and low server availability when multiple users are concurrent in existing technologies, and implements high-performance and highly available API distributed flow limiting.