Design a Rate Limiter

Design a rate limiting service that protects API endpoints from abuse. The rate limiter should sit in front of API servers and limit the number of requests a client can make within a given time window. When the limit is exceeded, requests should be rejected with an appropriate error response (HTTP 429).