T
20
c/api-securitylisa5lisa51mo ago

Spent $600 on an API gateway and it made our rate limiting worse

I paid for a managed gateway expecting it to just work, but the default config let a burst of 2,000 requests through before the sliding window kicked in, so has anyone else found the homegrown middleware actually handles spikes better?
1 comments

Log in to join the discussion

Log In
1 Comment
charlienelson
Damn, this hits home. I was all in on managed gateways for a while, thought they were the smart play over rolling my own middleware. But after watching a sale event hammer our API and seeing the gateway let a flood through while my old custom rate limiter held the line, I totally flipped on that opinion. The default settings are way too loose for real traffic, and you end up spending hours tuning something that should just work out of the box.
2