How do you rate limit your API's? One of the approaches is to assign a unique token(has based on IP, time, TTL etc) for every new session. Implement this on a

How do you rate limit your API's? One of the approaches is to assign a unique token(has based on IP, time, TTL etc) for every new session. Implement this on a front layer before hitting your API servers.