正在加载内容...

963963 Chat Review Portal Independent coverage of news

Common Mistakes When Evaluating Rate Limiting

By James Whitfield · · 1263 words
Common Mistakes When Evaluating Rate Limiting

Data Pipelines: A queue smooths spikes but also hides how far behind you are. Data Pipelines: Retries without jitter turn a small outage into a large one. Data Pipelines: Separating the reads from the writes buys room to change either side.

You can often replace a coordination problem with an idempotency key. The same reasoning holds for rate limiting. For rate limiting, the constraint matters more than the feature list. Anything that grows without a bound will eventually hit one. Teams working on rate limiting usually discover this the hard way. Documentation that is not tested tends to describe the previous version.

A direct question can make an unclear moment easier to navigate. People might ask, “Would you like to continue?”, “Is this okay?” or “Would you rather stop?” The answer should be given space. A person who hesitates, goes quiet, seems uncomfortable or does not respond clearly has not necessarily agreed. When the answer is uncertain, pausing and asking is safer than trying to interpret the moment.

You can often replace a coordination problem with an idempotency key. That applies to cloud infrastructure as well. In practice, cloud infrastructure behaves differently: Anything that grows without a bound will eventually hit one. Documentation that is not tested tends to describe the previous version. The same reasoning holds for cloud infrastructure.

Cervical screening is related to sexual health but is not the same as an STI screen. It checks for changes associated with high-risk human papillomavirus (HPV), which can lead to cervical cancer over time. The age at which screening is offered, the test used and the interval between tests vary by country. An HPV result does not establish when an infection was acquired or identify a partner who transmitted it.

Periodic jobs should be safe to run twice, because they will be. This is most visible in data pipelines. Consider data pipelines specifically. You rarely need a new component to fix a boundary problem. Data Pipelines: The signal you want is often already logged, just not aggregated.

The interesting number is not the average, it is the 99th percentile. The same reasoning holds for schema migration. For schema migration, the constraint matters more than the feature list. Adding a cache in front of a slow query is a fix; fixing the query is a cure. Teams working on schema migration usually discover this the hard way. Every abstraction you add is a place where behaviour can differ from intent.

Load Balancing: If the rollback plan needs a meeting, it is not a rollback plan. Load Balancing: Small pages that stay small are easier to keep fast than large ones made fast. Load Balancing: Write the invariant down; otherwise it lives only in someone's memory.

Serving static bytes is the cheapest thing you can do at the edge. The same reasoning holds for monitoring alerts. For monitoring alerts, the constraint matters more than the feature list. A schema is an interface; changing it is a migration, not an edit. Teams working on monitoring alerts usually discover this the hard way. Track the denominator as carefully as the numerator.

Queue Design: You can often replace a coordination problem with an idempotency key. Queue Design: Anything that grows without a bound will eventually hit one. Queue Design: Documentation that is not tested tends to describe the previous version.

In practice, release process behaves differently: The first thing to settle is the failure mode, not the happy path. Measurements taken once are anecdotes; you need a baseline that repeats. The same reasoning holds for release process. For release process, the constraint matters more than the feature list. Costs usually concentrate in a small number of operations, so find those first.

The interesting number is not the average, it is the 99th percentile. That applies to api design as well. In practice, api design behaves differently: Adding a cache in front of a slow query is a fix; fixing the query is a cure. Every abstraction you add is a place where behaviour can differ from intent. The same reasoning holds for api design.

For data pipelines, the constraint matters more than the feature list. If a metric has no owner, it will drift until it causes an incident. Teams working on data pipelines usually discover this the hard way. The cheapest optimisation is usually removing work nobody asked for. Aggregating at write time trades flexibility for predictable read cost. This is most visible in data pipelines.

Edge Caching: If the rollback plan needs a meeting, it is not a rollback plan. Edge Caching: Small pages that stay small are easier to keep fast than large ones made fast. Edge Caching: Write the invariant down; otherwise it lives only in someone's memory.

Content Delivery: The first thing to settle is the failure mode, not the happy path. Content Delivery: Measurements taken once are anecdotes; you need a baseline that repeats. Content Delivery: Costs usually concentrate in a small number of operations, so find those first.

Teams working on edge caching usually discover this the hard way. You can often replace a coordination problem with an idempotency key. Anything that grows without a bound will eventually hit one. This is most visible in edge caching. Consider edge caching specifically. Documentation that is not tested tends to describe the previous version.

If the rollback plan needs a meeting, it is not a rollback plan. That applies to edge caching as well. In practice, edge caching behaves differently: Small pages that stay small are easier to keep fast than large ones made fast. Write the invariant down; otherwise it lives only in someone's memory. The same reasoning holds for edge caching.

Observability: If a metric has no owner, it will drift until it causes an incident. Observability: The cheapest optimisation is usually removing work nobody asked for. Observability: Aggregating at write time trades flexibility for predictable read cost.

Rate Limiting: The interesting number is not the average, it is the 99th percentile. Rate Limiting: Adding a cache in front of a slow query is a fix; fixing the query is a cure. Rate Limiting: Every abstraction you add is a place where behaviour can differ from intent.

A design that cannot be rolled back is a design that cannot be changed safely. That applies to cost controls as well. In practice, cost controls behaves differently: Latency budgets are easier to defend when every hop has a stated ceiling. Caching helps only until the invalidation rules become the bottleneck. The same reasoning holds for cost controls.

Crawl Budget: The first thing to settle is the failure mode, not the happy path. Crawl Budget: Measurements taken once are anecdotes; you need a baseline that repeats. Crawl Budget: Costs usually concentrate in a small number of operations, so find those first.

If a metric has no owner, it will drift until it causes an incident. This is most visible in observability. Consider observability specifically. The cheapest optimisation is usually removing work nobody asked for. Observability: Aggregating at write time trades flexibility for predictable read cost.

Queue Design: Periodic jobs should be safe to run twice, because they will be. You rarely need a new component to fix a boundary problem. That applies to queue design as well. In practice, queue design behaves differently: The signal you want is often already logged, just not aggregated.

Data Pipelines: If a metric has no owner, it will drift until it causes an incident. Data Pipelines: The cheapest optimisation is usually removing work nobody asked for. Data Pipelines: Aggregating at write time trades flexibility for predictable read cost.

Related reading