When some parameter in a request for action=parse makes it bypass the parser cache, or more in general if a full reparse is needed, we should limit such actions per user (or IP) to N (with possibly N=3 ?) concurrent executions, using poolcounter.
We had a bot today making about 100 rps for pages like
http://zh.wikipedia.org/w/api.php?action=parse&pageid=2868367&prop=text&wrapoutputclass=wiki-article&disableeditsection=true&mobileformat=true&mainpage=true&format=json
and that caused a decided slowdown of the API cluster. We need to limit such users not to consume a significant portion of our computing power.