Leaky bucket.

the two-minute refresher

• Arrivals go into a queue of fixed capacity; processing happens at a constant rate.
• A burst of 30 at 10/s drains in 3 seconds; beyond capacity, requests are rejected.
• Great for protecting a downstream that needs a smooth rate.
• Bursts wait instead of being served at once: higher latency than a token bucket.