diff --git a/RateLimits.md b/RateLimits.md new file mode 100644 index 0000000..17c0079 --- /dev/null +++ b/RateLimits.md @@ -0,0 +1,8 @@ +--- +question: "How should GraphQL API rate limiting take into account requests with highly variable cost?" +draft: true +--- + +Add cost based rate limits i.e. aggregate query complexity per unit of time. Request level +rate limits are still useful though e.g. to prevent spamming an API with lots of invalid +GraphQL queries.