If you rate-limit on server side, it would mean that you would allow only a few legitimate users to use the site at any given time.