alt Hacker News> A request that arrives with no credentials gets 60 requests per hour per IP address.
One request per minute.
Replies
RIP NAT
https://gitlab.com/gitlab-org/gitlab
Makes 12 graphql API calls and 2 /api/v4 calls... So you get like 4 pages per hour unauth?
More like you have 60 requests, you can exhaust them in a single second or spread them differently as per your choice.
Doesn’t help with scrapers though. They use a unique IP for each query.
Hopefully they bump this up.
Browsing open issues or reviewing a few PRs will easily use more than one request per minute.
The limits are based on the average user but I wonder if the most common interaction is to view a readme and bounce.
I don’t know that putting a paywall up to learn from or even consider contributing to public projects is a good thing.
Average, yes, but the way they phrase it, it could be a token bucket or similar, where you can do 60 quick requests and then be blocked for a bit while the bucket refills