What is Rate Limiting?
Suppose you have a application where a user can post his picture, for this action you are calling an api endpoint running on a server and the endpoint stores the post in the database.
Now lets say the user posting the picture spams the post button and the server recieves thousands of requests per second, potentially overwhelming the server and causing it to crash or become unresponsive for other users.
To avoid the above scenario Rate Limiting is used!!
Setup
Create a boilerplate Next.js project using:
npx create-next-app@latest
Install @upstash/redis and @upstash/ratelimit using:
npm i @upstash/redis @upstash/ratelimit
docs - https://upstash.com/blog/upstash-ratelimit
Implementation of rate limiting
Since we are using nextjs the demonstration of implementation will be using server actions.
so, go ahead create a folder of actions and creates a server action which posts a picture or content to the database(Highly suggest prisma or drizzle for this).
After creating the server action follow the following steps:
create a config folder and inside it create upstash.ts file with the following code
import { Redis } from "@upstash/redis"
export const redis = new Redis({
url: `enter your upstash db url here`
token: `enter you db token here`
});
Now inside your server actions file, where the action for posting is created we'll use upstash/ratelimit by doing the following:
"use server";
import { Ratelimit } from '@upstash/ratelimit';
import { redis } from './upstash';
import { headers } from 'next/headers';
const ratelimit = new Ratelimit({
redis,
limiter: Ratelimit.slidingWindow(5,"120s");
});
export const addPost = async () => {
const ip = headers().get('x-forwarded-for');
const {remaining, limit, success} = await ratelimit.limit(ip!);
console.log(limit)
console.log(remaining)
console.log(success)
if(!success){
return "unable to process the request, limit reached wait for 2 minutes";
}
}
Note: Here we are using rate limiting which uses sliding window technique and there are many more types of rate limiting to know about them check out the following link:
types of rate limiting: https://www.imperva.com/learn/application-security/rate-limiting/
There you go!! now you know how to implement rate limiting in your large scale projects very easily without any headache.
