rate-limiter

Set tiered rate limits on API endpoints with Redis-backed storage and in-memory fallback.

11|Updated Apr 16, 2026

Search Tags:#api #redis #middleware #in-memory #throttling #rate-limiter

Ready to run

npx skills add https://github.com/berkcangumusisik/claude-code-practices --skill rate-limiter-berkcangumusisik

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: rate-limiter
Source: https://github.com/berkcangumusisik/claude-code-practices/tree/main/skills/rate-limiter
Command: npx skills add https://github.com/berkcangumusisik/claude-code-practices --skill rate-limiter-berkcangumusisik

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

API rate limiting blocks excessive requests to protect services and ensure reliability.

Core Features & Use Cases

Tiered limits by endpoint sensitivity with per-endpoint rules and fallback
Graceful degradation if Redis is down, using in-memory fallback
Whitelisting for trusted IPs and service accounts

Quick Start

Configure your API to apply tiered rate limits using the provided limiter definitions and deploy to your environment.

Frequently Asked Questions about rate-limiter

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I enforce API rate limits to prevent backend abuse?▼

API rate limiting blocks excessive requests to protect services. You can enforce tiered limits on authentication, API, and public endpoints using Redis-backed storage, with an in-memory fallback for graceful degradation if Redis is unavailable.

Can I apply different rate limits to specific API endpoints?▼

Yes, API rate limiting supports tiered limits by endpoint sensitivity. You can define per-endpoint rules to apply stricter throttling to authentication endpoints while allowing higher limits for public endpoints.

Does this rate limiter work without Redis?▼

Yes, the rate limiter features graceful degradation if Redis is down. It automatically falls back to in-memory storage to maintain API throttling, ensuring backend resources remain protected even without Redis.

How do I whitelist trusted IPs for API rate limiting?▼

API rate limiting includes IP whitelisting for trusted IPs and service accounts. You can configure these exemptions to bypass throttling rules, ensuring legitimate internal or partner traffic is never blocked.

What is the best way to handle clients hitting API rate limits?▼

When clients exceed API rate limits, the system defines proper Retry-After headers. This informs clients exactly how long to wait before retrying requests, improving client integration and reducing repeated abuse attempts.

Why do I need in-memory fallback for API throttling?▼

In-memory fallback ensures continuous API throttling when Redis is unavailable. It prevents complete service exposure during storage outages by maintaining rate limit enforcement locally, avoiding sudden backend resource overload.