Drogue

Drogue is a production-ready rate limiting and DDoS protection library for Python web frameworks. It provides clean, decorator-based rate limiting without polluting function signatures — no request parameter needed. Key features: • 3 algorithms: Token Bucket, Sliding Window, Fixed Window • Framework adapters for FastAPI, Flask, Django, and Django REST Framework • WebSocket rate limiting • DDoS detection with Z-score anomaly analysis • Progressive auto-ban with escalating durations • Trust caching for 7x faster verified user paths • Circuit breaker, probe detection, CIDR filtering • Shadow mode to test rules before enforcement • Prometheus and OpenTelemetry integration • Zero runtime dependencies for core Benchmarks: ~1.4us median latency, 700K+ req/sec throughput. Unlike existing solutions, drogue supports WebSocket rate limiting, detects DDoS patterns, and fast-tracks trusted users — all with zero middleware boilerplate in your function signatures.