Forum Discussion
Embedded The request was blocked by DoSP
Hi Alexander,
Thanks for this update.
Do you also happen to know how long it takes for the security algorithm (policy) before the IP address is cleared from black list ?
@Question2community: As there is currently no way to influence the PBI Security algorithm, we are then turning into looking deeper in our calls.
How can we validate (logs or similiar) what our Synapse pipelines calls to PBI REST API's are actually doing ?
Things like retrys, warning, invalid tokens, errors, etc. This can maybe then help us to pin point the probable cause.
To the suggestion of Microsoft, changing ADF runtime to different region, we would need to get clearence from our Security team first. Also, I'm curious as if this will unblock permanetly or just let calls through from other region but when swithcing back to current region the algorithm will again block our calls. Do you happen to know the behavior in this case?
Regards, Fabian
Hi Fabian, Alexander,
I implemented the suggested workaround on our DEV and TEST environment. It is a little bit more work then it seemed originally as you cannot 'move' an existing data factory to another region. Rather you have to recreate it completely in another region, and then apply all access policies and necessary security settings.
Luckily we did not had to recreate all our data factories in another region, 'moving' the "refresh dataset" data factory to another region was sufficient. (it 'moved' from West Europe to France Central).
The orchestration data factory (residing in West Europe) started the 'refresh dataset' data factory (residing in France Central) using REST API call.
I'm sure not all IT departments will allow this workaround, but at least I can confirm that it is working (as long as no other customer in the France region is creating invalid requests, resulting in DoS error messages again).
Please keep us informed about the implementation of the token-throttling so we can switch back to the original region.
Regards,
Thomas