[.Net Framework 4] How to Implement API Rate Limiting/Throttling .5]

[rony22]

For our REST API, which is hosted as an Azure app service, we need to integrate API throttling. Azure Front Door serves as a load balancer for app services across various regions. The rate restriction should be done based on the client's IP address or the value of a header key that is unique to that client. There is no ip address or client list that has been pre-defined.

As an example, When a client sends an API request with the header "idKey = foo," only 100 requests should be served from that client for the following 1 minute. Each client should be served until the limit is met.



How should this be implemented/designed in the project? The concept for the project is based on. 4.5.1 Microsoft.NET Framework

[dev7060]

For our REST API, which is hosted as an Azure app service, we need to integrate API throttling. Azure Front Door serves as a load balancer for app services across various regions. The rate restriction should be done based on the client's IP address or the value of a header key that is unique to that client. There is no ip address or client list that has been pre-defined.

As an example, When a client sends an API request with the header "idKey = foo," only 100 requests should be served from that client for the following 1 minute. Each client should be served until the limit is met.



How should this be implemented/designed in the project? The concept for the project is based on. 4.5.1 Microsoft.NET Framework

I have never worked with .NET but this is how I'd approach it in a generic way. Although i can't say if it'd prove useful in this scenario. I'd create a session and set up variables for the number of requests and time. For each request made by the client, the cookie header can be read to retrieve the session id and respective values (requests/time) can be checked/updated on the server side before allowing access to the API. A database entry can be used to check if the 'idKey' is currently being engaged (with an IP) to avoid further connection requests.