Rate Limit Design

Core Workflow

1. Identify protected resources, abuse cases, client types, tenants, plans, expected traffic, and operational constraints.
2. Choose limit dimensions: user, tenant, token, IP, endpoint, method, workload, or account plan.
3. Define algorithm and policy: fixed window, sliding window, token bucket, concurrency limit, quota, or adaptive control.
4. Specify response headers, error contract, retry guidance, burst behavior, exemptions, and monitoring.
5. Include rollout, tuning, and support override procedures.
6. Add tests for allowed, limited, burst, and recovery behavior.

Safety Rules