Api Rate Limiting

作者 secondsky88378361314fMIT227 个星标收录于 2026年10月8日更新于 2026年10月8日仓库10天前更新

Implements API rate limiting using token bucket, sliding window, and Redis-based algorithms to protect against abuse. Use when securing public APIs, implementing tiered access, or preventing denial-of-service attacks.

仅含说明Software Development Security

AI 生成的概览

指导使用令牌桶、滑动窗口和基于 Redis 的算法实现 API 限流。

功能: 该技能为 API 添加限流提供参考指导，涵盖令牌桶、滑动窗口和固定窗口算法及其优缺点。它包含 Node.js 令牌桶示例代码、Express 中间件配置、标准限流响应头以及分层请求限额。它还列出最佳实践，例如使用 Redis 实现分布式限流，以及返回带 Retry-After 的 429 响应。
适用场景: 适用于保护公共 API 免受滥用、按套餐实现分层访问或防止拒绝服务攻击的场景。适合为现有 API 添加请求节流的开发者。
运行要求: 不附带脚本，仅为说明文档。应用示例需要 Node.js 环境，可选使用 express-rate-limit 包，分布式限流需要 Redis。

API Rate Limiting

Protect APIs from abuse using rate limiting algorithms with per-user and per-endpoint strategies.

Algorithms

Token Bucket (Node.js)

javascript

class TokenBucket {  constructor(capacity, refillRate) {    this.capacity = capacity;    this.tokens = capacity;    this.refillRate = refillRate; // tokens per second    this.lastRefill = Date.now();  }
  consume() {    this.refill();    if (this.tokens >= 1) {      this.tokens--;      return true;    }    return false;  }
  refill() {    const now = Date.now();    const elapsed = (now - this.lastRefill) / 1000;    this.tokens = Math.min(this.capacity, this.tokens + elapsed * this.refillRate);    this.lastRefill = now;  }}

class TokenBucket {  constructor(capacity, refillRate) {    this.capacity = capacity;    this.tokens = capacity;    this.refillRate = refillRate; // tokens per second    this.lastRefill = Date.now();  }
  consume() {    this.refill();    if (this.tokens >= 1) {      this.tokens--;      return true;    }    return false;  }
  refill() {    const now = Date.now();    const elapsed = (now - this.lastRefill) / 1000;    this.tokens = Math.min(this.capacity, this.tokens + elapsed * this.refillRate);    this.lastRefill = now;  }}

Express Middleware

javascript

const rateLimit = require('express-rate-limit');
const limiter = rateLimit({  windowMs: 15 * 60 * 1000, // 15 minutes  max: 100,  standardHeaders: true,  message: { error: 'Too many requests, try again later' }});
app.use('/api/', limiter);

const rateLimit = require('express-rate-limit');
const limiter = rateLimit({  windowMs: 15 * 60 * 1000, // 15 minutes  max: 100,  standardHeaders: true,  message: { error: 'Too many requests, try again later' }});
app.use('/api/', limiter);

Response Headers

Tiered Limits

Best Practices

Use Redis for distributed rate limiting
Include proper headers in responses
Return 429 status with Retry-After
Implement tiered limits for different plans
Monitor rate limit metrics
Test under load

来源与署名

来源：secondsky/claude-skills位于plugins/api-rate-limiting/skills/api-rate-limiting提交8837836

许可证： MIT

内容归原作者所有。SourceWeft 从公开仓库中收录这些内容。

举报或申请下架

更多Software Development技能

Playground

anthropics

精选

构建自包含的交互式 HTML 演练场，包含控件、实时预览和可复制的提示词输出。

Software Development37K今天更新

M5 Onboard

anthropics

精选

通过 USB 检测 M5Stack ESP32 开发板，刷写 UIFlow 2.0 固件并安装 MicroPython 应用包。

Software Development37K今天更新

Cardputer Buddy

anthropics

精选

指导迭代 Cardputer-Adv 的 MicroPython 应用包：添加应用、通过 USB 串口推送文件、查看日志并运行 REPL 命令。

Software Development37K今天更新

Web Design Guidelines

vercel-labs

精选

依据从远程来源获取的 Web Interface Guidelines 审查 UI 代码，并以 file:line 形式报告问题。

Software Development32K5周前更新

Vercel React Native Skills

vercel-labs

精选

React Native 与 Expo 最佳实践规则，涵盖列表性能、动画、导航、UI 模式、状态与 monorepo 配置。

Software Development32K5周前更新

Vercel React Best Practices

vercel-labs

精选

Vercel 的 React 与 Next.js 性能指南，以 70 条规则的形式用于编写、审查和重构代码。

Software Development32K5周前更新

Algorithm	Pros	Cons
Token Bucket	Handles bursts, smooth	Memory per user
Sliding Window	Accurate	Memory intensive
Fixed Window	Simple	Boundary spikes

Tier	Requests/Hour
Free	100
Pro	1,000
Enterprise	10,000

Api Rate Limiting

API Rate Limiting

Algorithms

Token Bucket (Node.js)

Express Middleware

Response Headers

Tiered Limits

Best Practices

来源与署名

更多来自 secondsky/claude-skills 的技能

Vulnerability Scanning

Web Performance Optimization

Web Performance Audit

Threejs

Tailwind V4 Shadcn

Technical Specification

更多Software Development技能

Playground

M5 Onboard

Cardputer Buddy

Web Design Guidelines

Vercel React Native Skills

Vercel React Best Practices