# Rate limiting

> A token bucket on the Gateway: a burst up to the bucket passes whole, and the long-run average holds at the limit.

## Prerequisites

Research these first: [API gateway](https://wiki.playquorum.dev/research/api-gateway.md).

It leads to [Credential stuffing protection](https://wiki.playquorum.dev/research/credential-protection.md).

## Engineering terms

- [Rate limiting](https://wiki.playquorum.dev/glossary/rate-limiting.md)
- [Token bucket](https://wiki.playquorum.dev/glossary/token-bucket.md)

## Facts

Rate limiting
- **Track:** Infrastructure
- **Era:** [Series A](https://wiki.playquorum.dev/eras/series-a.md)
- **Cost:** 1.35k 1.35k
- **Requires:** [API gateway](https://wiki.playquorum.dev/research/api-gateway.md)

## See also

- [Research tree](https://wiki.playquorum.dev/research.md)

Source: https://wiki.playquorum.dev/research/rate-limiting