Istio Rate Limits
Istio is open-source software, not a hosted SaaS, so there are no provider-enforced API rate limits. The "Istio APIs" are Kubernetes Custom Resources (VirtualService, DestinationRule, Gateway, AuthorizationPolicy, etc.) read and written via the Kubernetes API server. Rate limiting in an Istio mesh is something operators *configure* (local rate limit via Envoy, or global rate limit via an external rate-limit service) — it is not enforced against Istio itself.
Istio Rate Limits is the machine-readable rate-limit profile for Istio on the APIs.io network, in the API Commons Rate Limits shape.
It captures 1 rate-limit definition, measuring varies.
An exhausted limit returns HTTP 429.
This profile was written by API Evangelist and has not been verified against a page the provider published; treat every limit as unconfirmed until a dated transcription replaces it.
The profile also includes 3 backoff/retry policies defined and response codes documented for throttled.
Tagged areas include Rate Limiting, Service Mesh, Open Source, and Networking.
generated, dated 2026-05-05.
Limits
Policies
Sources
- https://istio.io/latest/docs/tasks/policy-enforcement/rate-limit/
- https://istio.io/latest/docs/reference/config/networking/
Work with this as data
Every rate limit here is available over the APIs.io API and to AI agents over MCP.