Maximum Request Sizes

Tyk supports forcing request size limits on a global and on a per-endpoint level, Tyk will reject any request that is too big. Size limits can be set on a global or per-path basis.

Note for Tyk Cloud Users: Tyk Cloud enforces a strict request size limit of 1MB an all inbound requests via our cloud architecture. This does not affect hybrid users.

Max Request Size with the Dashboard

To enforce a request sizer on your API, you must first go into your Endpoint designer:

1. Add a new endpoint.

   

2. Fill in the endpoint pattern with the details of the request (e.g. GET widgets/{wildcard}).

3. Select Request Size Limit from the “Plugins” drop down.

   

4. Set the size limit.

   

5. Save the API.

Max Request Size with API Definition

To set up this middleware in your API Definition, simply add a new section to the extended_paths block of your API Definition configuration called size_limits:

    "size_limits": [
        {
          "path": "widget/{id}",
          "method": "PUT",
          "size_limit": 25
        }
      ]

The size limit must be in in bytes.

Global size limiting

To add a global check for size limits, simply add:

    "global_size_limit": 500 

To the version element of your API Definition, the global size limit will be checked before the specific path-based one.