1. Based on IP 2. Based on API Key 3. Based on User (basic auth) 4. JWT Use Bucket4j. Distributed rate limit not supported.