How should rate limiting be applied in a production system?

Choose limits by identity and cost, return clear retry information, support bursts deliberately, and observe rejected traffic.