Rate Limiting (Token Bucket):

How do you allow "bursts" of traffic while still protecting your system from long-term abuse? A simple "fixed window" limit can be too rigid and frustrate legitimate users. The Token Bucket algorithm allows users to "save up" tokens during quiet times. This allows them to perform a quick burst of actions (like loading a dashboard) while still being capped if they try to sustain that high rate.