HTTP 429 means the client has sent too many requests in a given amount of time (rate limiting). Laravel triggers this when requests exceed configured limits \u2014 typically to protect your app from abuse or overloading.<\/p>\n\n\n\n
throttle<\/code> middleware<\/li>\n\n\n\n- Mobile or IoT apps making rapid requests<\/li>\n<\/ul>\n\n\n\n
\n\n\n\n\ud83d\udcc4 Laravel Rate Limiting Basics<\/h2>\n\n\n\n
Laravel uses the ThrottleRequests<\/code> middleware:<\/p>\n\n\nRoute::middleware('throttle:60,1'<\/span>)->group(function<\/span> ()<\/span> <\/span>{\n Route::get('\/api\/data'<\/span>, 'DataController@index'<\/span>);\n});\n<\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\nThis allows 60 requests per minute per user\/IP<\/strong>.<\/p>\n\n\n\n
\n\n\n\n\u2705 Solutions to Fix or Improve Rate Limiting<\/h2>\n\n\n\n\u2705 1. Increase Rate Limit Per Route<\/h3>\n\n\nRoute::middleware('throttle:300,1'<\/span>)->get('\/api\/resource'<\/span>, 'ResourceController@index'<\/span>);\n<\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n\nAllows 300 requests per minute<\/p>\n<\/blockquote>\n\n\n\n
\n\n\n\n\u2705 2. Define Custom Rate Limiters (Laravel 8+)<\/h3>\n\n\n\n
In RouteServiceProvider.php<\/code>:<\/p>\n\n\nuse<\/span> Illuminate<\/span>\\Support<\/span>\\Facades<\/span>\\RateLimiter<\/span>;\nuse<\/span> Illuminate<\/span>\\Cache<\/span>\\RateLimiting<\/span>\\Limit<\/span>;\n\nRateLimiter::for('custom-api'<\/span>, function<\/span> ($request)<\/span> <\/span>{\n return<\/span> Limit::perMinute(200<\/span>)->by(optional($request->user())->id ?: $request->ip());\n});\n<\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\nThen use:<\/p>\n\n\n
Route::middleware('throttle:custom-api'<\/span>)->group(...);\n<\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n
\n\n\n\n\u2705 3. Throttle Based on User ID (Not IP)<\/h3>\n\n\nLimit::perMinute(300<\/span>)->by($request->user()?->id ?: $request->ip());\n<\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n\nThis prevents shared IPs (like containers or offices) from hitting the global rate limit.<\/p>\n<\/blockquote>\n\n\n\n
\n\n\n\n\u2705 4. Disable Rate Limiting for Internal IPs<\/h3>\n\n\nRateLimiter::for('api'<\/span>, function<\/span> ($request)<\/span> <\/span>{\n if<\/span> (in_array($request->ip(), ['127.0.0.1'<\/span>, '172.20.0.2'<\/span>])) {\n return<\/span> Limit::none();\n }\n return<\/span> Limit::perMinute(60<\/span>);\n});\n<\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n
\n\n\n\n\u2705 5. Handle 429 Gracefully in Frontend\/Microservices<\/h3>\n\n\n\n
Add retry logic:<\/p>\n\n\n
if<\/span> (response.status === 429<\/span>) {\n const<\/span> retryAfter = response.headers['retry-after'<\/span>] || 1<\/span>;\n await<\/span> new<\/span> Promise<\/span>(r<\/span> =><\/span> setTimeout(r, retryAfter * 1000<\/span>));\n retryRequest();\n}\n<\/code><\/span>Code language:<\/span> JavaScript<\/span> (<\/span>javascript<\/span>)<\/span><\/small><\/pre>\n\n\n
\n\n\n\n\u2705 6. Use Laravel Job Queues for Heavy APIs<\/h3>\n\n\n\n
Offload rate-heavy tasks to queues:<\/p>\n\n\n
dispatch(new<\/span> ProcessWebhook($data));\n<\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n\nAvoid synchronous spikes by spreading processing.<\/p>\n<\/blockquote>\n\n\n\n
\n\n\n\n\u2705 7. Track and Log 429 Errors<\/h3>\n\n\n\n
Use global exception handler:<\/p>\n\n\n
public<\/span> function<\/span> render<\/span>($request, Throwable $exception)<\/span>\n<\/span>{\n if<\/span> ($exception instanceof<\/span> ThrottleRequestsException) {\n Log::warning('Rate limit exceeded'<\/span>, [\n 'ip'<\/span> => $request->ip(),\n 'url'<\/span> => $request->url(),\n ]);\n }\n return<\/span> parent<\/span>::render($request, $exception);\n}\n<\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\n
\n\n\n\n\u2705 8. Use Redis for Smarter Limiting<\/h3>\n\n\n\n
Laravel supports Redis-backed rate limits:<\/p>\n\n\n
'limiter'<\/span> => env('CACHE_DRIVER'<\/span>, 'redis'<\/span>),\n<\/code><\/span>Code language:<\/span> PHP<\/span> (<\/span>php<\/span>)<\/span><\/small><\/pre>\n\n\nRedis allows burst handling and high-speed checks.<\/p>\n\n\n\n
\n\n\n\n\u2705 9. Use API Gateway or Reverse Proxy Rate Limiting<\/h3>\n\n\n\n
If using services like:<\/p>\n\n\n\n
\n- NGINX:
limit_req_zone<\/code>, limit_req<\/code><\/li>\n\n\n\n- AWS API Gateway: rate\/usage plans<\/li>\n\n\n\n
- Cloudflare: Rate Limiting Rules<\/li>\n<\/ul>\n\n\n\n
\nApply rate limits before Laravel even sees the request.<\/p>\n<\/blockquote>\n\n\n\n
\n\n\n\n\u2705 10. Implement Client Token Quotas<\/h3>\n\n\n\n
Track usage per API token\/user key:<\/p>\n\n\n\n
\n- Use Laravel Passport or Sanctum<\/li>\n\n\n\n
- Store request counts in Redis\/DB<\/li>\n<\/ul>\n\n\n\n
\n\n\n\n\ud83d\ude80 Microservices Specific Tips<\/h2>\n\n\n\nProblem<\/th> Solution<\/th><\/tr><\/thead> Burst API requests<\/td> Queue or cache throttle<\/td><\/tr> Services on same IP<\/td> Use unique user tokens per service<\/td><\/tr> Stateless retry loops<\/td> Add jitter or exponential backoff<\/td><\/tr> API aggregator overload<\/td> Add inter-service caching<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
\n\n\n\n\ud83d\udd0e Inspect Rate Limit Headers<\/h2>\n\n\n\n
Laravel adds these headers:<\/p>\n\n\n\n
\nX-RateLimit-Limit<\/code><\/li>\n\n\n\nX-RateLimit-Remaining<\/code><\/li>\n\n\n\nRetry-After<\/code><\/li>\n<\/ul>\n\n\n\nLog or inspect them to tune performance or debug issues.<\/p>\n\n\n\n
\n\n\n\n\ud83d\udd04 Summary<\/h2>\n\n\n\nSolution<\/th> Use Case<\/th><\/tr><\/thead> throttle:200,1<\/code><\/td>General increase<\/td><\/tr> Custom limiter<\/td> User-based, IP-based<\/td><\/tr> Disable for internal IPs<\/td> Microservices, local traffic<\/td><\/tr> Queuing heavy jobs<\/td> Async deferral<\/td><\/tr> Redis backend<\/td> Fast & scalable<\/td><\/tr> Gateway limits<\/td> Layer 7 protection<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
\n\n\n\n\ud83c\udf1f Final Thoughts<\/h2>\n\n\n\n
429 errors protect your app \u2014 but when wrongly configured, they block real users and services. Laravel gives you the tools to fine-tune rate limits by IP, user, or context. For microservices, coordination is key: throttle at the API gateway and queue jobs internally.<\/p>\n\n\n\n
Let me know if you want examples with Laravel Sanctum, Redis-backed rate limits, or job queue implementations!<\/p>\n","protected":false},"excerpt":{"rendered":"
\ud83d\udeab What is HTTP 429 – Too Many Requests? HTTP 429 means the client has sent too many requests in a given amount of time (rate limiting). Laravel triggers this… <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"_joinchat":[],"footnotes":""},"categories":[2],"tags":[],"class_list":["post-49080","post","type-post","status-publish","format-standard","hentry","category-uncategorised"],"_links":{"self":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts\/49080","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/comments?post=49080"}],"version-history":[{"count":2,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts\/49080\/revisions"}],"predecessor-version":[{"id":49082,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/posts\/49080\/revisions\/49082"}],"wp:attachment":[{"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/media?parent=49080"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/categories?post=49080"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.devopsschool.com\/blog\/wp-json\/wp\/v2\/tags?post=49080"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}