
From IP-Based Rate Limiting to Dual-Bucket Protection: Making Rate Limiting Fair and Abuse-Resistant
IP‑only limits punish everyone behind a shared address; fingerprint‑only limits are easy to game. Dual‑bucket rate limiting, strict per fingerprint and looser per IP, keeps everyday traffic fair while capping total abuse.









