yo what do you usually do for rate limiting on the api

were buildin a new set of apis and need to implement rate limitin to protect our services ive seen a few approaches like fixed windows sliding windows and token buckets whats worked best in practice are there specific libs or tools u recommend for managin this especially in a distributed system