specification: API Commons Rate Limits
specificationVersion: '0.1'
schema: https://raw.githubusercontent.com/api-evangelist/interface-research/main/schema/api-commons.yml#/$defs/RateLimits
provider: Aruba
providerId: aruba
created: '2026-05-04'
# Provenance stamped 2026-08-11: this artifact was written by the API Evangelist
# bulk sweep dated 2026-05-04, not harvested from the provider. See roadmap#35.
method: generated
modified: '2026-05-05'
reconciled: false
tags:
  - Cloud
  - Network Management
  - Networking
  - SD-WAN
  - Security
  - Wireless
  - Rate Limiting
description: Aruba (HPE Aruba Networking) APIs (Aruba Central, ClearPass, AOS-CX, EdgeConnect) implement
  per-cluster, per-account, and per-controller rate-limiting. Aruba Central documents a 1-second / 7-per-IP
  (token endpoint) limit and per-API quotas, but a single canonical public rate-limit table for the full
  Aruba API estate is not published; check each product's developer docs.
sources:
  - https://developer.arubanetworks.com/
  - https://developer.arubanetworks.com/aruba-central/docs/api-rate-limits
notes: No single public canonical rate-limit table covers all Aruba API products; values vary by product
  (Central, ClearPass, AOS-CX, EdgeConnect, AirWave) and cluster. Treat the entries below as starting
  pointers — verify against the specific product's developer docs.
responseCodes:
  throttled: 429
  serviceUnavailable: 503
limits:
  - name: Aruba Central API (per-cluster)
    scope: account/cluster
    metric: varies
    limit: per-product per-cluster quotas; see Aruba Central API rate limit docs
    notes: Aruba Central documents API rate limits per cluster and per token; consult the developer
      portal for the specific cluster.
  - name: ClearPass API
    scope: appliance
    metric: varies
    limit: enforced per ClearPass appliance configuration
    notes: ClearPass rate-limiting is operator-configured on the appliance, not platform-imposed.
  - name: AOS-CX REST API (on-switch)
    scope: switch
    metric: concurrent_requests
    limit: see AOS-CX REST API guide for the running firmware version
    notes: AOS-CX runs the API on the switch itself; concurrency and CPU pressure dominate over fixed
      per-second quotas.
policies:
  - name: Backoff Strategy
    description: Honor Retry-After when present; use exponential backoff with jitter on 429.
  - name: Per-Product Variation
    description: Each Aruba product (Central, ClearPass, AOS-CX, EdgeConnect, AirWave) enforces limits
      independently — implement per-product limit tracking rather than a single global budget.
  - name: Token Endpoint Throttling
    description: OAuth/token endpoints in Aruba Central are aggressively rate-limited (low single-digit
      requests per second per IP); cache and reuse tokens within their TTL.
maintainers:
  - FN: Kin Lane
    email: kin@apievangelist.com
    url: https://apievangelist.com