Managing user traffic is actually pretty easy, you just build a state table and then meter access by request volume. The problem often becomes managing the state table and not the actual code complexity itself, but most of the time that can be avoided by not tying the state table into the site's authentication backend.

I haven't seen any good "off the shelf" systems that do this so maybe there's a niche to be filled.