You can block all connections in one click, except the connections that passes through O&M APIs, to handle unexpected traffic burst and quickly recover your cluster.
PUT /_cluster/settings { "persistent": { "flowcontrol.break.enabled": true } }
PUT /_cluster/settings { "persistent": { "flowcontrol.break.enabled": false } }