How should rate limiting and WAF integration be designed for production in Ingress?

Use layered controls, trustworthy client identity, sensible thresholds, WAF rules, and observability for blocked traffic.