POST request size limits

Infrastructure services are configured with enforced limits on POST body size. The default limit is set to 2 MB. This limit protects services from memory exhaustion and denial-of-service attacks by capping the maximum payload size any single request may consume. Typical payloads are well within this threshold, so the limit is generally not a concern in practice. For cases involving large uploads — such as file or material transfers — dedicated request paths are used, which are specifically designed to handle such payloads safely.

For services that deviate from the default limit, the limit is configured individually. This ensures that the threshold is increased only to the extent required by the specific use case, and only for that context.

It is important to note that while the configured limit determines the maximum payload size a service will accept, it does not guarantee that a payload of that size will be successfully transferred without the request timing out. The configured limit applies solely at the service layer and does not account for network-level constraints.