正在加载内容...

963963 Chat Cloud Portal Independent coverage of news

Rate Limiting: A Practical Overview

By Michael Torres · · 1308 words
Rate Limiting: A Practical Overview

Rate Limiting: A design that cannot be rolled back is a design that cannot be changed safely. Rate Limiting: Latency budgets are easier to defend when every hop has a stated ceiling. Rate Limiting: Caching helps only until the invalidation rules become the bottleneck.

Backup Strategy: Serving static bytes is the cheapest thing you can do at the edge. Backup Strategy: A schema is an interface; changing it is a migration, not an edit. Backup Strategy: Track the denominator as carefully as the numerator.

Teams working on rate limiting usually discover this the hard way. Serving static bytes is the cheapest thing you can do at the edge. A schema is an interface; changing it is a migration, not an edit. This is most visible in rate limiting. Consider rate limiting specifically. Track the denominator as carefully as the numerator.

A design that cannot be rolled back is a design that cannot be changed safely. That applies to cost controls as well. In practice, cost controls behaves differently: Latency budgets are easier to defend when every hop has a stated ceiling. Caching helps only until the invalidation rules become the bottleneck. The same reasoning holds for cost controls.

Rate Limiting: Configurations should be reviewable in a diff, not only in a console. Rate Limiting: The best time to add an index is before the table gets large. Rate Limiting: Failures are usually correlated, so plan for the shared dependency.

Backup Strategy: Configurations should be reviewable in a diff, not only in a console. The best time to add an index is before the table gets large. That applies to backup strategy as well. In practice, backup strategy behaves differently: Failures are usually correlated, so plan for the shared dependency.

Observability: If the rollback plan needs a meeting, it is not a rollback plan. Observability: Small pages that stay small are easier to keep fast than large ones made fast. Observability: Write the invariant down; otherwise it lives only in someone's memory.

A useful way to think about consent is that it should be voluntary, informed, specific and ongoing. “Voluntary” means a person is choosing without force, threats or pressure that undermines their choice. “Informed” means they understand what they are agreeing to. Specificity means the agreement applies to what was actually discussed, not to a broader assumption. These are educational principles; the precise legal test depends on local law.

Separate the outer parcel from the product’s retail packaging. A seller may place a branded product box inside a plain shipping carton, but that does not establish that the carton is opaque, sealed against viewing, or free of paperwork. Check whether packing slips, invoices or promotional inserts are included. If the answer is not published, do not assume that a plain exterior also means the contents are hidden from the recipient who opens it or from anyone with access to the delivery.

Storage Tiers: A queue smooths spikes but also hides how far behind you are. Storage Tiers: Retries without jitter turn a small outage into a large one. Storage Tiers: Separating the reads from the writes buys room to change either side.

Schema Migration: If a metric has no owner, it will drift until it causes an incident. Schema Migration: The cheapest optimisation is usually removing work nobody asked for. Schema Migration: Aggregating at write time trades flexibility for predictable read cost.

Switch the product off and disconnect it from its charger before cleaning. If it uses replaceable batteries, remove them only if the manual directs you to do so. Wash your hands first, then remove visible residue with a clean, soft cloth or rinse the product only when its instructions permit rinsing. Keep water away from seams, buttons, charging contacts and battery compartments unless the maker explicitly says those areas can be exposed.

It can help to prepare a short sentence and a next step. For instance: “I want to take things slowly, so let’s check in before anything changes,” or “I don’t want photos taken or shared.” If you are unsure what you want, say so. “I’m still working that out, and I want to pause for now” communicates a limit without requiring you to settle every future question.

Crawl Budget: If the rollback plan needs a meeting, it is not a rollback plan. Crawl Budget: Small pages that stay small are easier to keep fast than large ones made fast. Crawl Budget: Write the invariant down; otherwise it lives only in someone's memory.

The interesting number is not the average, it is the 99th percentile. That applies to release process as well. In practice, release process behaves differently: Adding a cache in front of a slow query is a fix; fixing the query is a cure. Every abstraction you add is a place where behaviour can differ from intent. The same reasoning holds for release process.

A queue smooths spikes but also hides how far behind you are. This is most visible in api design. Consider api design specifically. Retries without jitter turn a small outage into a large one. API Design: Separating the reads from the writes buys room to change either side.

Access Control: If a metric has no owner, it will drift until it causes an incident. Access Control: The cheapest optimisation is usually removing work nobody asked for. Access Control: Aggregating at write time trades flexibility for predictable read cost.

For load balancing, the constraint matters more than the feature list. Periodic jobs should be safe to run twice, because they will be. Teams working on load balancing usually discover this the hard way. You rarely need a new component to fix a boundary problem. The signal you want is often already logged, just not aggregated. This is most visible in load balancing.

Talk about privacy, too. Clarify whether intimate messages or images may be saved, shown to someone else, or shared online. Do not assume that permission to create or send an image includes permission to distribute it. Laws concerning intimate images differ across countries, and sharing without consent may have serious consequences. If you do not want an image made or shared, state that plainly.

Log Analysis: A queue smooths spikes but also hides how far behind you are. Log Analysis: Retries without jitter turn a small outage into a large one. Log Analysis: Separating the reads from the writes buys room to change either side.

Pressure can also interfere with a free choice. Repeated requests after a refusal, threats, intimidation or using someone’s dependence or vulnerability to influence them are not respectful ways to seek agreement. Differences in authority or power can make it harder for a person to refuse, even without an explicit threat. A responsible check-in leaves room for an honest no and does not punish, shame or bargain with someone for setting a boundary.

Schema Migration: If the rollback plan needs a meeting, it is not a rollback plan. Schema Migration: Small pages that stay small are easier to keep fast than large ones made fast. Schema Migration: Write the invariant down; otherwise it lives only in someone's memory.

The interesting number is not the average, it is the 99th percentile. The same reasoning holds for schema migration. For schema migration, the constraint matters more than the feature list. Adding a cache in front of a slow query is a fix; fixing the query is a cure. Teams working on schema migration usually discover this the hard way. Every abstraction you add is a place where behaviour can differ from intent.

Serving static bytes is the cheapest thing you can do at the edge. That applies to storage tiers as well. In practice, storage tiers behaves differently: A schema is an interface; changing it is a migration, not an edit. Track the denominator as carefully as the numerator. The same reasoning holds for storage tiers.

Related reading