Stream: implementers
Topic: FHIR Throttling
ℭ𝔞𝔭⥠⦿𝔟𝔦𝔩𝔩 (Oct 19 2021 at 19:15):
Spec Of the Topic
https://www.healthit.gov/test-method/standardized-api-patient-and-population-services 1
While the specification talks about access to the API.
There isn’t any requirements I can find around access rates requirements
What would be a reasonable throttle limit to keep costs down…
How do we block denial of service app[apps that call the FHIR lots of time per day], especially when lots of patients start using it?
Grahame Grieve (Oct 19 2021 at 19:33):
all servers have to do something about denial of service. It's not unreasonable to limit access per client per app, but it's not possible to do it by IP address of the client anymore (IP mapping)
ℭ𝔞𝔭⥠⦿𝔟𝔦𝔩𝔩 (Oct 19 2021 at 20:07):
What would be a reasonable rate for a patient? once per day? Per app?
Lloyd McKenzie (Oct 19 2021 at 20:14):
Patients could absolutely look at their data multiple times. Many client apps will be light-weight apps with no local storage, so if the patient looks at data, then changes screens, then changes back, they'll re-query. I could easily expect a patient app to make 10s or even 100s of queries for the same patient in the same day.
Grahame Grieve (Oct 19 2021 at 21:00):
once per second...
Last updated: Apr 12 2022 at 19:14 UTC
