Hacker News Reader

Average, yes, but the way they phrase it, it could be a token bucket or similar, where you can do 60 quick requests and then be blocked for a bit while the bucket refills

RIP NAT

https://gitlab.com/gitlab-org/gitlab

Makes 12 graphql API calls and 2 /api/v4 calls... So you get like 4 pages per hour unauth?

More like you have 60 requests, you can exhaust them in a single second or spread them differently as per your choice.

Doesn’t help with scrapers though. They use a unique IP for each query.

But it will hit any human behind a CGNAT:)

Or a lot more with IPv6.

Most connections or VPS have a shared 64bit prefix that acts similar to an IPv4 address in that it's easy to block.

Yes, you get 64 more bits to make whatever addresses you want, but the prefix is still your fingerprint.

Could even do /32 if they want to make it as scarce as ipv4

Hopefully they bump this up.

Browsing open issues or reviewing a few PRs will easily use more than one request per minute.

The limits are based on the average user but I wonder if the most common interaction is to view a readme and bounce.

I don’t know that putting a paywall up to learn from or even consider contributing to public projects is a good thing.