Probably an HTTP endpoint. It should depend on the health of the WFE's backends and also the WFE's loading status for the rate limit overrides.