Rate limiting protects your API from abuse while ensuring fair usage.
Common Strategies
Token Bucket Tokens refill at a fixed rate. Each request consumes a token.
Sliding Window Track requests in a rolling time window.
Implementation
```javascript const rateLimit = require("express-rate-limit"); const limiter = rateLimit({ windowMs: 15*60*1000, max: 100 }); app.use("/api/", limiter); ```