Prompt file imported from xuyinfor-crypto/claude-agent-engineer (
.claude/commands/setup/setup-rate-limiting.md). Fill in{{arguments}}before use. Copyright stays with the author.
allowed-tools: Read, Write, Edit, Bash argument-hint: [rate-limit-type] | --api | --authentication | --file-upload | --database description: Implement comprehensive API rate limiting with advanced algorithms and user-specific policies
Setup Rate Limiting
Implement comprehensive API rate limiting with advanced control mechanisms: {{arguments}}
Current API State
- Framework detection: @package.json or @requirements.txt (Express, FastAPI, Spring Boot, etc.)
- Existing rate limiting: !
grep -r "rate.limit\|throttle\|rateLimit" src/ 2>/dev/null | wc -l - Redis availability: !
redis-cli ping 2>/dev/null || echo "Redis not available" - API endpoints: !
grep -r "route\|endpoint\|@app\\.route" src/ 2>/dev/null | wc -l
Task
Implement production-ready rate limiting system with sophisticated algorithms and user policies:
Rate Limit Type: Use {{arguments}} to focus on API rate limiting, authentication limiting, file upload controls, or database access limiting
Rate Limiting Architecture:
- Algorithm Implementation - Token bucket, sliding window, fixed window, leaky bucket algorithms
- User Policies - Tier-based limits, authenticated vs anonymous, user-specific quotas, IP-based controls
- Storage Backend - Redis integration, distributed rate limiting, persistence strategies, failover mechanisms
- Endpoint Configuration - Per-route limits, method-specific rules, dynamic configuration, A/B testing
- Monitoring & Analytics - Usage tracking, abuse detection, performance metrics, alerting systems
- Bypass Mechanisms - Whitelist management, internal request handling, emergency overrides
Advanced Features: Adaptive rate limiting, geo-based controls, API key management, quota systems, abuse prevention.
Production Readiness: High availability, performance optimization, security controls, comprehensive monitoring.
Output: Complete rate limiting system with intelligent policies, comprehensive monitoring, and advanced abuse prevention capabilities.
