One misbehaving client is enough to take an API down. It doesn't have to be an attacker. A mobile app with a bug in its retry loop.

Source: [Dev.to](https://dev.to/antonmartyniuk/rate-limiting-in-aspnet-core-all-4-algorithms-explained-with-code-33fa)

Sponsored