slapdash

Never has rate limiting felt so damn good.

slapdash, as the name implies, approaches rate limiting in a careless, hasty, or haphazard manner. instead of having to track agents precisely it uses bloomfilters to rapidly identify the heaviest usage agents quickly and restricts them.

by taking this approach slashdash in its default settings protect an endpoint from a large number of attackers while using O(1) memory, minimal allocations, sub millisecond response times, and a entirely graceful failure scenario all entirely in application, no extra servers, coordination, or databases needed.

limit := slapdash.NewLimiter(rate.NewLimiter(rate.Every(time.Millisecond), 1))
if err := limit.Allow(context.Background(), []byte("user id")); err != nil {
  log.Println("BLOCKED", err)
  return
}