Fixed Window rate limiting algorithm Fixed Window rate limiting algorithm enforces a limit on the number of events allowed within a time window. "Maximum 5 password attempts in 10 minutes" is a classic example. The common misconception about Fixed Window is that people describe it as "allows N requests per fixed calendar window" and then warn about the "burst at boundary" problem. Flexible Fixed Window Algorithm I call it flexible, because somehow the developer community h...