How should backends rate-limit burst sync after outages?

After an outage, fleets reconnect together, so rate limits must protect commands before historical telemetry. Use token buckets per device, jittered client backoff, and queue-depth monitoring. For example, accept a door-lock command ack immediately while delaying bulk sensor logs until the gateway’s replay queue drains.