Why Rate limiting with express-rate-limit? - Purpose & Use Cases

The Big Idea

What if a simple tool could stop bad traffic from crashing your website instantly?

The Scenario

Imagine your website suddenly gets flooded with hundreds of requests every second from the same user or bot, trying to overload your server.

You try to block them manually by checking each request and counting how many times they hit your server.

The Problem

Manually tracking and blocking repeated requests is slow and complicated.

You might miss some requests or accidentally block good users.

It's easy to make mistakes that crash your server or let attacks slip through.

The Solution

The express-rate-limit library automatically counts requests per user and blocks them when they exceed limits.

This protects your server smoothly without extra code or errors.

Before vs After

✗ Before

let count = 0;
app.use((req, res, next) => {
  count++;
  if (count > 100) res.status(429).send('Too many requests');
  else next();
});

✓ After

import rateLimit from 'express-rate-limit';
const limiter = rateLimit({ windowMs: 60000, max: 100 });
app.use(limiter);

What It Enables

You can easily protect your app from overload and abuse, keeping it fast and reliable for all users.

Real Life Example

A popular online store uses rate limiting to stop bots from spamming their checkout page, ensuring real customers can buy without delays.

Key Takeaways

Manual request tracking is error-prone and hard to maintain.

express-rate-limit automates request counting and blocking.

This keeps your server safe and responsive under heavy traffic.