Rate Limiting Quiz
Built-in RateLimiter middleware with FixedWindow/SlidingWindow/TokenBucket/Concurrency, partition by user/API key, distributed counters with Redis Lua INCR/EXPIRE, 429 + Retry-After + RateLimit-* headers, layered with APIM.
Test: Rate Limiting Quiz
Scenario questions with explanations that show exactly where your model of it breaks.
Reading API Rate Limiting is free. Pro unlocks the other four modes on all API Design topics, so you can go from understanding it to building it.
- SeeThe architecture as diagrams, so you can hold the whole system in your head.
- AnimateStep through the flow one stage at a time and watch the data move.
- TestScenario questions with explanations that show exactly where your model of it breaks.
- BuildA guided implementation with code you can run and adapt for production.
Continue reading
All API Design articles →API Gateways in 2026: YARP, Azure APIM, and the AI Gateway Pattern
YARP for in-process east-west traffic, Azure APIM north-south with policies for auth + rate limit + transform, BFF per channel, defense in depth, and the 2026 AI Gateway: token caps + semantic cache + token metrics.
OpenAPI 3.1 on .NET 9: Built-in Spec, Scalar UI, and Kiota Clients
Microsoft.AspNetCore.OpenApi replacing Swashbuckle, OpenAPI 3.1 with JSON Schema 2020-12, Scalar / Redoc UIs, schema + document transformers, Kiota / NSwag SDK generation, Spectral lint + oasdiff in CI.
API Versioning: URL, Header, Media Type, and Sunset Discipline
Asp.Versioning 8 on .NET 9, URL/query/header/media-type schemes, additive evolution, one domain with multiple wire mappers, RFC 8594 Sunset + Deprecation headers, per-version OpenAPI documents.
Discussion
Sign in to share your feedback and join the discussion.

