APIs
api
security
backend
What is Rate Limiting?
Definition
Rate limiting restricts the number of API requests a client can make within a time window (e.g., 100 requests per minute). It protects servers from abuse, ensures fair usage, and prevents denial-of-service attacks.
Why It Matters
Rate limiting is essential for any public API. Without it, a single client can overwhelm the server. Common algorithms include token bucket, sliding window, and fixed window. Rate limit responses use HTTP 429 (Too Many Requests) status code.