Per-user buckets prevent one client from starving others. Global buckets protect the server but allow noisy-neighbor problems.