Before kicking in, your backend and ours must be protected against DoS & DDoS attacks, express-rate-limit library is one of the libraries that we use to do so. As you can see, you will be able to test each of the services below only once. Our backend middleware is configured as follows:
const limiter = rateLimit({
windowMs: 60 * 60 * 1000, // 1 hour
max: 2, // Limit each IP to 2 requests per user
standardHeaders: true, // Return rate limit info in the `RateLimit-*` headers
legacyHeaders: false, // Disable the `X-RateLimit-*` headers
});