在ASP.NET MVC中实现请求限制的最佳方法？

public class RateLimitPolicy
{
    public int RequestLimit { get; set; }
    public int TimeWindowInSeconds { get; set; }
}

public class RateLimiter
{
    private readonly ConcurrentDictionary<string, List<DateTime>> _requests = new ConcurrentDictionary<string, List<DateTime>>();

    public bool IsRequestAllowed(string key, RateLimitPolicy policy)
    {
        var currentTime = DateTime.UtcNow;
        var requests = _requests.GetOrAdd(key, new List<DateTime>());

        // 移除旧的请求记录
        requests.RemoveAll(x => (currentTime - x).TotalSeconds > policy.TimeWindowInSeconds);

        // 检查请求是否应该被限制
        if (requests.Count >= policy.RequestLimit)
        {
            return false;
        }

        // 添加新的请求记录
        requests.Add(currentTime);
        return true;
    }
}

public class HomeController : Controller
{
    private readonly RateLimiter _rateLimiter;

    public HomeController(RateLimiter rateLimiter)
    {
        _rateLimiter = rateLimiter;
    }

    public IActionResult Index()
    {
        var policy = new RateLimitPolicy
        {
            RequestLimit = 10,
            TimeWindowInSeconds = 60
        };

        var key = HttpContext.Connection.RemoteIpAddress.ToString();

        if (!_rateLimiter.IsRequestAllowed(key, policy))
        {
            return Content("请求过于频繁，请稍后重试。");
        }

        return View();
    }
}