Web Development
Bug Report
Redis rate limiter let 3x the limit through: read-then-write race across pods
Our per-tenant limit was 100 requests per second, yet one tenant pushed 310 through to a partner API that then blocked us. The Redis limiter read the counter, decided in Node, then wrote back. Moving the whole token bucket into one Lua script fixed it.