Project: ShopLite API rate limiter
60 min · Intermediate
ShopLite is under attack from two sides at once: a price scraper hammers the product list and a script guesses passwords on the login endpoint. One limiter with a different policy per endpoint stops both while real shoppers, even a whole hostel behind one IP, keep working.
Interview questions this lesson answers
- How does your limiter decide which bucket a request uses?
- Why did you limit login on two keys?
- How did you make the output repeatable?
- What would you change to run this on several servers?
- What would you improve next?
Sign in to continue this lesson
Create an account to read every lesson, practise with the exercises and keep track of your progress.