How to rate limit (throttle) your ASP.NET Core API

Hello everybody I'm Nick and in this video I am going to show you how you can rate limit, or throttle, your ASP.NET Core APIs. Rate limiting is vital for your public APIs because it prevents abuse by bad actors. You can also sell access to specific endpoints or the API as a whole with different rules. We will be using a Nuget package called AspNetCoreRateLimit.

Timestamps
Intro - 0:00
IP based rate limiting - 1:10
Client based rate limiting - 8:49
Distributed rate limiting with Redis - 13:39

Don't forget to comment, like and subscribe :)

Social Media:

#csharp #dotnet #aspnetcore

[yangeruch]

Would love to see more content about security.

[sywor]

It would be nice if the configuration of each endpoint could set through attributes on the endpoint method instead of using json config.

[JohannGambolputty]

Nothing to do with this video, all of them you make are extraordinary indeed, but just wanted to say, you are killing us, when I say us I mean us (Java Developers). You really sometimes make me believe that nothing can be compared with C#... Yes, yes... I know the old good saying "You know, everything has its own purpose, and depends where and how you use it. :)", Again, Brilliant work Nick. Euxaristume!

[jaredlash]

Something I would like to see is how to consume a rate limited API. There's tons of stuff on creating rate limited APIs for others to consume, not much from the consumer's side.

[haha-hktx]

Had this in mind, and you came in clutch... can't believe it is that easy...

[bartekm]

Exactly what I was looking for! Awesome video! Thank you so much!

[curiosity]

I keep telling my self where did I see you, your voice and actions is very familiar, today I found it. you are pretty much the same as Ivar the boneless in the Viking series. thanks for the video I appreciate the help

[fifty]

this library is perfect, very well thought out

[hernanar]

Nick, you are amazing, is incredible how you can be serious and funny at the moment of teach. And that gives a lot of points, because when i see your videos you have all my atention.

Keep coding ¡Eres el mejor! :)

[thiagomatu]

Amazing video as always Nick, thanks for sharing this knowledge with us!

[sunilanthony]

It's like you were reading my mind. This is the exact topic I was going to research. Thank you.

Enjoying your vids!! Can you make one implementing an API developer key administration that supports expiration and retracting the keys

[aniljha]

That's great. I would love to see how can i implement this on previous version of .Net

[FraserMcLean]

Awesome video, thanks Nick! This will help me in a project I am planning in the near future. Love your content, keep it up!

[SaadZafar]

Really liked your explanation. Just 2 questions. Can we use MongoDB instead of Redis? How can we see the number of requests per client for reporting or monitoring purposes?

[Aphradity]

Excellent video Nick. Very informative.

[mihaimyh]

Nice video, thanks! Any video plans about background task scheduling in .NET?

[stevemcqueen]

If you have a proxy like Nginx or a Web Application Firewall infront of your App it will probably be better to use their rate limiting capabilities.

[krishnaable]

Hello nick we havent discuss about client rules here?

[jackkendall]

I was just looking for how to do this the other day, pog.