Why, where, and when should we throttle or rate limit?

[@sagar1689]

Great content. I would relate this rate limiting concept to a famous blog website where it doesn't allow free reads of their blogs after their free quota is finished and then we need to be a premium member to access their blog site. Hope my understanding is correct 😀

[@AsliEngineering]

Yes :)

[@meetcharola3624]

Keep posting stuff like this. Helps a lot. ❤

[@shervilgupta92]

Amazing content as always, thanks Arpit !!

[@dipankarkumarsingh]

Finished ✅ : Notes Highlight : Interesting Fact : ( Personal Exp ) Linkedin Post Edit usually takes more than 5 min to reflect the change to other users. I thought how baldy LinkedIn is engineered 😂, but now I get that it must be the internal rate limiter which must be pending the update to the database directly 🙂. Most interesting part : Sending 200 Responses to the Attacker 😁, so cool trick. The Hard Delete you mentioned , makes system unresponsive for some time. Similar to this , there are many operations in the OS kernal that if they don't handle the correct amount of data picked for the proccing can cause unresponsiveness . App has stopped working ( very common issue ) [ WINDOWS ISSUE ] I can assume Windows kernel don't have proper Rate Limitter + batch processing for some task. I assume 💻 Apple devices have a limited set of standard hardware configurations, thus they are able to apply and tune the rate limit of data pickup for CPU , Ram, and other data streams for the most effective use of hardware. Of course there must be many more optimization not just Rate limiters. But the concept of rate limiter is so dynamic , I can now see it everywhere not just API call 😂😂 very Insightful video Aripit 🙌🙌

[@therealsumitshah]

Great explanation Arpit!

[@bhavinmajethia7070]

Thanks for the amazing content.

[@prashlovessamosa]

Thanks for sharing.

[@siddhartharay01]

I have implemented aggregated notification at my last job. This discussion was interesting though.

[@snlagr]

17:04 hard deleting is hard on the DB 😂 So rate limiting can just be part of business logic without explicitly specifying it? aka not necessarily a separate component or something complex

[@AsliEngineering]

yup. You do not need a microservice for everything.

[@abhiraj533]

Hi Arpit, I am working as a data engineering but have a knack of learning new things and following you for quite some time .. 1 thing that confuses me how we quantify that "at a time system can serve X no of requests at a given point of time", is it depends on core strength server has or the way Multithreading has been put in place ?

[@thecodepathshala]

Rate limiter system design in Hindi : kzbin.info/www/bejne/oZnLlmqXq9iqZ8k Easy to understand...

[@raj_kundalia]

thank you

[@yogendragadilkar8898]

Thank you for such a nice content and explanation. Could you also please elaborate or make a video on How do we identify what are the acceptable rates or how many request my API or microservice or system can handle? How do we calculate these statistics?

[@saiavinashduddupudi8975]

Thanks for the concepts. If Throttling and Rate limiter serves the same purpose i.e to stop overwhelming the API server with excessive requests, then what is the actual difference between Throttling and Rate limiter?

[@divadugar4695]

I think throttling is a technique and rate limiter(a component) works on that technique

[@ihsaashi11]

Hey Arpit , Solid video 👍 , Just had a doubt on the last use case of Rate Limiter there .... Wouldn't the distribution of Deletes be done through some sort of a job scheduler or a cron job... instead of a specifically programmed rate limiter ?

[@AsliEngineering]

Rate limiter is a concept. What you are thinking is an API rate limiter. Think of a leaky bucket implementation of staggered deletes.

[@shivamagrawal8682]

@arpit how do we design a rate limiter over a message queue so as to consume messages at a particular defined threshold only and not exceed that. This could be a multi consumer system hence we need to ensure global rate limit

[@theSeniorSDE]

Can you please share this notes as well. That would be really helpful

[@AsliEngineering]

Soon. Just about to automate the entire process.

[@theSeniorSDE]

@@AsliEngineering Thanks

[@richuthomas8530]

Hi Arpit Great Content. Keep posting. Nice way of explaination. I have a Query Rate limiting prevents DOS Attack right ? If a request is originated from computers of different IP address from different parts of the world. How come the system knows which ip address to block may be it can be a legit user.

[@AsliEngineering]

It suppresses to some extent. When the attack is happening you will manually keep on adding relevant IP addresses to it If the request is authenticated then you might blacklist the user on the rate limiter. Some part of this process can also be automated. Not denying it.

[@vikassrivastava7081]

bhaiya notes please!

[@AsliEngineering]

Notes there on my website arpitbhayani.me