I do rate limiting by kind and pubkey with Nosflare.

The biggest issue I ever saw was with REQs from Bostr lol.