Rate Limiting

Rate limiting controls the number of requests a client can make to an API within a defined time window, protecting services from overload and abuse. Common algorithms include token bucket (smooth bursts), sliding window, and fixed window counting.

Rate limiting is typically enforced at the API gateway layer and communicates limits via HTTP 429 responses and rate limit headers.