NSNilay Shahaneincuriousnilay.hashnode.dev·Aug 15 · 8 min readI Tried Designing a Distributed Rate Limiter. Here’s Every Place It Broke.Somewhere out there is a client with a bug — a while (true) loop with a missing break condition, hammering /api/order/create as fast as the network allows. while (true) { await fetch('/api/order/cre21T
SSUPRABHATinblog.suprabhat.site·Aug 14 · 7 min readBuilding Scalable Systems: Caching, Rate Limiting and ObservabilityEvery application starts small. A few users, a single server, everything running smoothly. Then one day, traffic spikes. The database groans. Requests start timing out. Users leave. This isn't a hypot00
PNPrithwish Nathinprithwish-nath.hashnode.dev·Jul 21 · 21 min readWhy Increasing Concurrency Causes HTTP 429 Errors (It’s Not Just Too Many Requests)TL;DR: Concurrency is usually introduced as a performance tip. Parallelism is a good thing, so more workers should mean more requests, and more data. If ten workers are good, why not twenty? If twenty00
SBSamanta Bindrainarchitecturedev.hashnode.dev·Jun 27 · 7 min readDistributed Rate LimitingMost discussions around rate limiting start with algorithms — Fixed Window, Sliding Window, Token Bucket, Leaky Bucket. After building and operating a distributed rate limiting layer, one thing become00
AAwxGlobalinawxglobal.hashnode.dev·May 5 · 4 min readWhat happens when an AI agent hits a rate limit — and how to design around itWhat happens when an AI agent hits a rate limit — and how to design around it Your AI agent is processing customer support tickets at 3 AM. It's been running flawlessly for hours, then suddenly: RateLimitError: You exceeded your current quota. The ag...00
CC9labinc9lab.hashnode.dev·Apr 27 · 4 min readFuzzing Web Applications using FFUF: The Complete Mastery GuideIn the competitive world of bug bounty hunting, efficiency and speed are everything. Fuzz testing has become a core technique for identifying hidden attack surfaces, and when it comes to web applicati00
BSBharat Singhinbharatsingh.hashnode.dev·Apr 18 · 9 min readWhy I Chose Token Bucket for HoldUp (And Why the Others Didn't Make the Cut)Most engineers add rate limiting because someone told them to, or because they got hit with an abuse spike and panicked. They slap on a library, set a number, and call it done. The question of which a00
PUProsper Ugbovoinfreecodecamp.org·Mar 27 · 13 min readHow to Implement Token Bucket Rate Limiting with FastAPIAPIs power everything from mobile apps to enterprise platforms, quietly handling millions of requests per day. Without safeguards, a single misconfigured client or a burst of automated traffic can ove00
CCosmosincosmoscribe.hashnode.dev·Mar 18 · 6 min readThe Journey of a Request: What Happens Before Your Code Even Runs?Okay, before we go into the depths of these concepts, I want to tell you that we will take it easy. I don’t want you to get overwhelmed by the jargon. We spend hours arguing about which programming la00
SKShubham Kumar Singhinblog.realdev.club·Mar 13 · 3 min readUnderstanding the Leaky Bucket Rate Limiter (with JavaScript Implementation)When building APIs or backend systems, one common challenge is handling too many requests at once. If a server receives a sudden spike of traffic, it may slow down or even crash. To prevent this, syst00
