RESTlet Governance

The SuiteScript governance model tracks usage units on two levels: API level and script level. At the API level, RESTlets have the same usage limits as other types of SuiteScripts. At the script level, RESTlets allow 5,000 usage units per script, a limit five times greater than Suitelets and most other types of SuiteScripts.

There is a guarantee of 10MB per string used as RESTlet input or output. In ideal circumstances, you may receive a larger string in an output, however, the 10MB size is the guarantee.

For more information, see SuiteScript Governance and Limits.

Note that SuiteScript currently does not support a logout operation similar to the one used to terminate a session in SOAP web services.

RESTlet Security

The URLs for accessing RESTlets are protected by TLS encryption. Only requests sent using TLS encryption are granted access. For more information, see Supported TLS Protocol and Cipher Suites.

Supported TLS Protocol and Cipher Suites

The Transport Layer Security (TLS) protocol is an established method for ensuring private, trustworthy, and reliable communication between computer programs over a network. Each new version of the TLS protocol enhances these qualities. Versions TLS 1.2 and TLS 1.3 are currently supported for use in NetSuite.

Computer programs use the TLS protocol to establish communication with each other. The TLS protocol is used for computer programs that connect using URLs that begin with https:// (the s indicates secure). URLs that begin with http:// are not subject to the TLS protocol.

For more information about the TLS protocol, see:

• A definition from Wikipedia: Transport Layer Security.
• The specification of the protocol: RFC 5246 – The Transport Layer Security (TLS) Protocol.

Important: All inbound and outbound secure communication must use TLS 1.2 or TLS 1.3