Problem Statement
Why is IP-based limiting alone unreliable on the public internet?
Explanation
Multiple users can appear as one IP, punishing good traffic. Mobile networks also change IPs often, breaking fairness. Prefer API keys or authenticated identities and use IP as a secondary signal.
Code Solution
SolutionRead Only
key = userId || apiKey || ipFallback
