Rate limit individual clients.
Let's play this out: how do you determine individual clients? By ip? By seasionid?
Let's play this out: how do you determine individual clients? By ip? By seasionid?