AspNetCoreRateLimit

AspNetCoreRateLimit is middleware for limiting requests to ASP.NET Core Web APIs and MVC applications. It can identify callers by IP address or client ID and apply separate policies to each category. Rules may target an entire application or specific endpoints, HTTP verbs, and URL paths. Administrators can define several quotas over intervals such as seconds or minutes and update those rules during runtime. The response returned after a quota is exceeded can be customized, and Redis can serve as a distributed counter store. The package is useful for established ASP.NET Core applications, although newer .NET versions also include built-in rate-limiting support.