Rate limiting a public API with Redis in Node.js

CO Chinedu Okafor 91 il y a 4 mois Nigeria

api node redis securite

My API gets hammered by scrapers. I want a limit per API key that works across several instances.

Modifiée il y a 1 heure

Great answer, the raw body tip saved me hours. · Ngozi Eze · il y a 3 mois

2 réponses

Les plus utiles Les plus récentes

KA Kwame Asante 50 · il y a 3 mois Réponse acceptée

Return Retry-After and X-RateLimit-Remaining headers so well-behaved clients can slow down, and apply stricter limits to expensive routes such as search or exports.

WK Wanjiru Kamau 25 · il y a 3 mois

A counter per key stored in Redis works across instances. Use INCR on a key like rl:{key}:{minute} and set EXPIRE on the first increment; reject with 429 when the counter exceeds the limit. Libraries such as rate-limiter-flexible implement a sliding window correctly.

Vous connaissez la réponse ? Rejoignez Griot pour aider.

Se connecter Rejoindre Griot