Ocelot VS AspNetCoreRateLimit

Sounds like you need some kind of ETL. The only dotnet library I know, which supports request aggregation, is Ocelot (https://github.com/ThreeMammals/Ocelot). But I doubt it is the only one out there.

They seems to recommend https://github.com/ThreeMammals/Ocelot

Ocelot Github Nuget: Install-Package Ocelot -Version 17.0.0

Ok, now that you created you Web API, it's time to work on your API Gateway. Start by adding the Ocelot package to your Gateway project:

Discovered Ocelot and it looks like a good place to start, so you have any thoughts on that?

I'd look for an open-source gateway using the programming language that you're familiar with. I was working multiple times with the custom API GW (including building my own for fun), and if you're familiar e.g. with C# take a look at this one https://github.com/ThreeMammals/Ocelot or even better https://github.com/microsoft/reverse-proxy If you need to build something really custom, there's a small chance that you will find a plug & play solution.

Lol, i guess your answer explains a lot about relevant knowledge into web architecture

Eg. Ocelot - https://github.com/ThreeMammals/Ocelot

AFAIK the new built-in rate limiting only supports in-memory counters at the moment. You will need to use the old open source rate limiting package instead: https://github.com/stefanprodan/AspNetCoreRateLimit

In this post, I wanted to give you some insights about how you can use the ASP.NET Core rate limiting middleware. It’s not as complete as Stefan Prodan’s AspNetCoreRateLimit, but there are enough options available to add rate limiting to your application.

Have a look at this package: https://github.com/stefanprodan/AspNetCoreRateLimit

Eventually I got around to implementing rate limiting on the endpoints, for the dotnet Core WebApi it is really easy to add thanks to the AspNetCoreRateLimit NuGet package. I chose to limit the endpoint to 2 requests per second, per IP Address as well as a limit of 10 requests per 30 seconds per IP Address. Then on the front end I added some messages to let the user know that they are being rate limited and we also limit their ability to spam the same emoji multiple times.