API Rate Limiter & Usage Control System
A high-performance traffic control gateway and rate-limiting platform designed to protect backend APIs from abusive traffic spikes and resource…
A high-performance traffic control gateway and rate-limiting platform designed to protect backend APIs from abusive traffic spikes and resource exhaustion. Implements Token Bucket and Sliding Window algorithms with continuous fractional token replenishment, atomic concurrency mutex locking to prevent race-condition bypasses during simultaneous bursts, tiered plans (Free, Pro, Enterprise), variable endpoint cost weighting (1x to 5x), real-time quota reset countdowns, RFC-compliant HTTP 429 and X-RateLimit response headers, and automated threat quarantine for repeat offenders.
- 1:1 pixel-accurate layout matching reference design with 5 top KPI cards, donut plan distribution, dual-axis request volume chart, and busiest endpoints bar chart
- Interactive Burst Test Simulator simulating up to 5,000 simultaneous requests with real-time Accepted (200 OK) vs Rate Limited (429) visualization
- Continuous token bucket refill engine preventing boundary burst attacks with microsecond accuracy
- Atomic concurrency mutex locking eliminating race conditions when hundreds of requests arrive at the exact same millisecond
- Weighted endpoint token costs (1 token for lightweight lookups, 5 tokens for heavy analytics/reports)
- Automated threat quarantine transitioning keys with 5+ violations into Blocked status with 1-click administrative remediation
- RFC-compliant rate limit telemetry headers (X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset, Retry-After)
- Complete Supabase / PostgreSQL schema with PL/pgSQL check_rate_limit() procedure using row-level FOR UPDATE locks and RLS
Built with: Rate Limiting Engine, Token Bucket Algorithm, Sliding Window Counter, Atomic Mutex Locking, Race Condition Prevention, Tiered Usage Plans, Endpoint Cost Weighting, Threat Auto-Quarantine, Supabase / PostgreSQL Schema, PL/pgSQL Atomic check_rate_limit(), Vanilla JavaScript, HTML5 / CSS3, Google Fonts (Sora, Outfit, Chivo Mono)