Questions tagged [rate-limiting]
The rate-limiting tag has no summary.
14 questions
3
votes
2
answers
581
views
What is the difference between Leaky bucket and Token bucket approach during rate limiting?
I am researching rate limiting and encountered those two strategies: leaky bucket and token bucket. After reading several articles these strategies seem the same too me, but all articles are ...
6
votes
3
answers
2k
views
How to communicate API Limit between multiple applications?
We currently have 3 Spring boot applications (with multiple instances across machines each) that communicate with an API via HTTP that is not in our hands.
This API has a limit on a per-day as well as ...
0
votes
3
answers
207
views
Modeling “Limits”
Let’s say a person can set a limit to play a game for N minutes a day. The player may increase their limit, but the increase doesn’t take effect until the next day.
Example, person sets a limit of 10 ...
3
votes
3
answers
259
views
Handling rate limits / delays in consumers without affecting performance of other operations
I have a producer that generates a batch job that consists of multiple operations (approx. 100 - 10000). These operations can be processed in any order, ideally as fast as possible.
The processing of ...
-2
votes
1
answer
213
views
Rate limiting design
I am designing rate limiting in my application in which the rules can be dynamic. I have a basic design in which every request is validated against the rate limiting quota, which is stored in redis. ...
0
votes
0
answers
612
views
Dealing with third party api rate limit when using multiple services
I have 1 api key that has a rate limit 1000req/1min.
I would like to somehow use 50% of that limit in service 1 and 50% of that limit in service 2. Let's say they're just 2 separate processes using ...
1
vote
1
answer
1k
views
Pattern to limit message queue processing based on external API throttling
I have a project where there's an external API which implements throttling. Roughly speaking, I'm allowed to perform N requests per minute. I also have a message queue (Apache Kafka) whose consumers ...
0
votes
4
answers
1k
views
Best practices for calling from one microservice to another in a loop
Let's assume we have a use case where ServiceA needs to make several calls to ServiceB. I know it would be best if the calls could be consolidated as one request, but let's say that's just not ...
1
vote
2
answers
463
views
Does API Rate Limiting Violate REST Methodology?
Information given here adequately explains the "Stateless" nature of REST. Even going as far as to say:
For becoming stateless, do not store even authentication/authorization details of ...
-2
votes
1
answer
291
views
Smooth out requests to rate limitted API
wasted requests not enough time for those requests
| |
| |
(1) |-x--x-----------------x----x--x--x| x x (executing ...
0
votes
1
answer
170
views
Should REST API rate limiting specifics be told to the caller?
I have an REST API, which has a rate limit of 1 query per IP per 5 seconds. When the user tries to call the API too often, I respond with the HTTP status code 429 Too Many Requests and a JSON message.
...
0
votes
1
answer
168
views
How to reduce DoS and DDoS attacks in an authenticated web server
I came up with an model to reduce DoS and DDoS attacks and would like your input on its effectiveness...
Basically, once a request reaches our servers without having a valid key, we add a key as a ...
21
votes
4
answers
3k
views
Rate limiting *un*-authenticated requests
Say we have a load balancer that also does rate limiting. Rate limiting seems pretty straightforward for logged-in users - just look at the JWT and maybe use an in-memory data-store to see how many ...
1
vote
2
answers
447
views
How to limit the amount of requests by minute to a external system on a micro services environment?
I'm having some problems to think on a solution to control the amount of requests by minute to a external system on a micro services environment on Kubernetes.
The scenario
This external system is ...