System Design
- Define the identity being limited: user, token, IP, or a combination.
- Token bucket allows bursts while enforcing an average rate; a fixed window is simpler but has boundary spikes.
- Discuss distributed counters, clock boundaries, failure policy, and observability.