(repost, my original post got removed cuz wrong category)
I don’t know if I’m the first to point this out, but recently I’ve noticed that Roblox’s ratelimiting on the website and joining games is way too sensitive.
What do I mean by “way too sensitive”, you might ask? The main point here is that I’ve noticed that Roblox will 429 you (block your request due to making “too many” requests in a set amount of time) if you interact with the website fast enough. I’ve never seen any other website ratelimit like Roblox does, and it makes me wonder why it’s like that. The way Roblox ratelimits you also depends on your ISP, whether you’re on a VPN, etc, which 90% of websites already check for things like VPNs anyway, but it’s still a factor nonetheless.
The video below is an example of this. I reload the Servers tab on a game page about 6 times in 6 seconds, 1 request per second obviously, and after that Roblox’s API gives me the finger, cusses out my entire family, and 429’s me, mind you not even outputting any sort of useful error message on the page itself for the average user to see that they’ve been ratelimited, instead I have to open DevTools on my browser to see that. Was it not in Roblox’s budget to have their frontend devs implement a simple if-then statement that checks whether or not a request succeeded? Who knows.
I’d like to note that this test was done on my home internet (AT&T Fiber), and not through a VPN, so I think we can rule out IP reputation being an issue.
In conclusion, I find it hard to believe there’s a good reason as to why Roblox ratelimiting is so sensitive. More importantly why are they ratelimiting GET requests so bad anyway, it’s not like I was deliberately modifying my account settings rapidly, hell, it’s not like I was spamming chats to someone using Chat & Party (do people still call it that?), I wasn’t doing anything that seems “suspicious” nor something that uses a good amount of resources such as constantly updating a database key/value/whatever. So I’m wondering if anyone else here on DevForum has experienced something similar and is either frustrated about it and/or asking the same questions I’m asking.