What are common ways of implementing web API request throttling? Are there any libraries for common web frameworks (Rails, Django, Java, etc.) that give you this along with temporary banning?
A related question suggests that the rate limiting is done at the web server by limiting requests by IP, but that would mean that all requests are treated equally. It seems like throttling needs to be handled by the application because:
- Some API calls may have different rate limits (e.g. an autocompletion API would have a higher limit than other calls)
- Temporary banning by API key can't be handled by the web server
- Requests coming from behind a proxy are treated the same (?)