# stefanprodan/AspNetCoreRateLimit

ASP.NET Core rate limiting middleware

Repository: https://github.com/stefanprodan/AspNetCoreRateLimit
Canonical: https://ross.abutalabs.com/products/aspnetcoreratelimit
Language: C#
License: MIT
License Family: permissive
Topics: rate-limiting, asp-net-core, middleware
Last push: 2024-07-26T11:58:58+00:00

## Health v2 (maintenance only)
Score: 23/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 0, release rhythm 8, longevity 100
- inputs: {"age_days": 3696, "days_push": 768, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 3172, forks 442 (observed 2026-08-28T04:07:47.522025+00:00)

## What it is
AspNetCoreRateLimit is an ASP.NET Core rate limiting middleware library for controlling how many requests clients can make to a Web API or MVC app. It supports IP-based and client-ID-based limits with per-URL and per-HTTP-verb scoping, configurable intervals, and runtime rule updates.

## Use cases
- throttle requests to an ASP.NET Core Web API by IP address
- limit API calls per client ID or API key
- apply different rate limits per endpoint or HTTP verb
- prevent API abuse and brute-force attacks on MVC apps
- update rate limit rules at runtime without redeploying
- distribute rate limit counters across servers with Redis

## When to choose
- you run an ASP.NET Core API and need fine-grained IP or client-based throttling
- you want configurable, runtime-updatable rate limit rules
- you need per-endpoint or per-verb quota scoping

## When to avoid
- you are on .NET 7+ and only need basic rate limiting, since built-in middleware now exists
- your stack is not ASP.NET Core
- you need advanced distributed rate limiting beyond the Redis package's capabilities

## Facets
- artifact type: library
- maturity: maintenance
- function: rate-limiting, middleware, web-framework
- domain: web-development, backend, apis, security
- platform: dotnet, cross-platform
- tags: asp-net-core, nuget, api-throttling, ip-rate-limiting, client-rate-limiting, web-server

## Member repositories
- stefanprodan/AspNetCoreRateLimit (main) score 23

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:07:47.522025+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T18:45:28.426022+00:00, confidence not recorded.
  - readme: https://github.com/stefanprodan/AspNetCoreRateLimit (fetched 2026-08-28T04:07:47.522025+00:00, sha 929c0dbc859d)
- Data as of 2026-08-30T08:39:29.467469+00:00.