You can block all connections in one click, except the connections that passes through O&M APIs, to handle unexpected traffic burst and quickly recover your cluster.
PUT /_cluster/settings
{
"persistent": {
"flowcontrol.break.enabled": true
}
}
PUT /_cluster/settings
{
"persistent": {
"flowcontrol.break.enabled": false
}
}