การผสานการจำกัดอัตรา

Welcome to the final lesson in our 'Combining Resilience Patterns' course! Today, we'll explore Rate Limiting and how it works alongside Circuit Breakers.

Rate limiting is a technique used to control the amount of incoming or outgoing traffic to a network or system. It sets a cap on how many requests a client or user can make within a given timeframe.

Why is rate limiting so important in microservices?

• Prevent Overload: It protects your services from being overwhelmed by too many requests, which could lead to slow performance or crashes.
• Ensure Fairness: It ensures that no single user or client can monopolize server resources, providing a fair experience for everyone.
• Guard Against Abuse: It helps prevent malicious activities like Denial-of-Service (DoS) attacks or brute-force login attempts.

At its core, rate limiting tracks how many requests a specific entity (like an IP address or user ID) sends over a period. If the number of requests exceeds a predefined threshold, subsequent requests are blocked or delayed.

Common algorithms include:

• Fixed Window: Counts requests in a fixed time window (e.g., 100 requests per minute).
• Sliding Window: Provides a smoother rate limit by considering a moving window of time.
• Token Bucket: Allows bursts of requests but maintains a steady average rate.

Rate limiting is typically implemented at key points in your architecture to maximize effectiveness:

• API Gateway: This is a common place to apply global rate limits for all incoming traffic to your microservices.
• Individual Service Level: Sometimes, specific services might have their own unique rate limits to protect their particular resources.
• Edge Proxies/Load Balancers: Can also enforce rate limits before traffic even hits your application layer.

Let's look at a very basic conceptual example of a fixed-window rate limiter. This simple Java code limits requests to 3 per second.

Run it and see how requests are allowed or denied.

It's important to distinguish rate limiting from circuit breakers, though both enhance resilience:

• Rate Limiting: A proactive mechanism to prevent overload by enforcing limits on traffic volume, regardless of service health.
• Circuit Breaker: A reactive mechanism that detects failures and prevents requests from going to an already failing service, allowing it to recover.

They address different problems but work well together.

When combined, rate limiting and circuit breakers offer a powerful defense:

• Rate Limiting acts as the first line of defense, preventing too many requests from even reaching a service. This reduces the chances of the service becoming overwhelmed.
• If, despite rate limiting, a service still fails (e.g., due to an internal bug or dependency issue), the Circuit Breaker will trip, protecting it from further requests and allowing it to stabilize.

They create layers of protection.

Imagine an e-commerce platform during a flash sale. An API Gateway uses rate limiting to ensure no single user or bot can make thousands of orders per second.

Meanwhile, the 'Payment Processing' microservice has a circuit breaker. If an external payment provider experiences an outage, the circuit breaker opens, preventing new payment requests from failing and allowing users to retry later, rather than causing a cascading failure.

Effective rate limiting requires careful configuration:

• Thresholds: How many requests are allowed per second/minute/hour?
• Burst Limits: How many extra requests can be made in a short period before hitting the hard limit?
• Scope: Is the limit per user, per IP, per API endpoint, or global?
• Action: What happens when the limit is reached (e.g., HTTP 429 Too Many Requests, delay, block)?

These parameters should align with your service's capacity and business needs.

You've learned about rate limiting and its relationship with circuit breakers. Let's test your understanding!

Great job! In this lesson, we explored Rate Limiting, a crucial pattern for controlling traffic and protecting your microservices from overload and abuse. We saw that it acts as a proactive defense mechanism.

Crucially, we learned how rate limiting complements the Circuit Breaker pattern, which is a reactive defense. Together, they form robust layers of resilience, ensuring your distributed systems can handle both high traffic and unexpected failures gracefully.