Rate Limiting in Vineforce Teams: Designing Dynamic API Policies on ASP.NET Core
Overview
Vineforce Teams is built on ASP.NET Zero, and it inherits ASP.NET Zero's dynamic rate limiting feature. Rate limiting policies are not hard-coded in Program.cs or appsettings.json. Administrators create them from the Administration > Rate Limiting screen, they are stored in the database, and they take effect at runtime without a restart or redeployment.
This article explains how that feature works under the hood, how a request is matched to a policy, and how to design a policy set that protects the API without throttling legitimate users. It is written for developers, architects, and DevOps engineers who operate or extend Vineforce Teams, particularly in on-premise deployments.