Rate limiting

A token bucket on the Gateway: a burst up to the bucket passes whole, and the long-run average holds at the limit.

Prerequisites#

Research these first: API gateway.

It leads to Credential stuffing protection.

Engineering terms#