Q42: How do you implement rate limiting in a Node.js API?

Rate limiting restricts repeated requests from single IP addresses within time windows. Libraries like express-rate-limit backed by Redis record request frequencies.

Key Takeaways
  • Protects endpoints against brute-force and Denial of Service (DoS) attacks.
  • Stores request counters in memory or distributed Redis instances.
Knowledge Check

Which HTTP status code is standard for rate limit policy violations?