[FEATURE] Add Rate Limiting to APIs for Database-Backed Endpoints

[rohitdasu]

Description

This issue aims to enhance the performance and security of our APIs by implementing rate limiting for endpoints that involve database operations. Rate limiting is crucial to prevent abuse, ensure fair usage, and protect our infrastructure from potential threats.

Let us discuss first which service is best for implementing rate limiting!

[rohitdasu]

Upstash is one of the good option here.

https://upstash.com/blog/nextjs-ratelimiting

[manzil-infinity180]

Upstash is one of the good option here.

https://upstash.com/blog/nextjs-ratelimiting

is this issue or security feature resolve with npm package express-rate-limit???

const limiter = rateLimit({
max:100,
windowMs: 60601000,
message : 'Too many reqests from this IP,please try again in an hour'
});

[kairblarson]

@manzil-infinity180 express-rate-limit limits all traffic but it seems like the Upstash limiter only limits endpoints that interact with redis

[rohitdasu]

@kairblarson it make sense

[kairblarson]

Ive been looking into it more and it seems like the upstash rate limiter leverages a redis cache so its not feasable unless we add redis. I then tried to use the express-rate-limit package but I dont think it works with nextjs however I did find a more traditional work around in this article here: https://kittygiraudel.com/2022/05/16/rate-limit-nextjs-api-routes/

I tried to implement it myself but could not figure out the exact typing

[madjed-hue]

hello @kairblarson,
You can check the lru-cache package,
Here is an example:
https://nextjs-rate-limit.vercel.app/

[kairblarson]

@madjed-hue this looks promising, ill look into it thank you!

[MrBlackGhostt]

Hi @rohitdasu if the issue is not solve i want to contribute it

[rohitdasu]

Hi @rohitdasu if the issue is not solve i want to contribute it

Sure

[MrBlackGhostt]

@rohitdasu i don't see is this assign it to me