Rate limiter: a counter, a clock and a decision in 2 ms

One strong interview answer to "design a rate limiter": a sliding window counter in Redis, checked and incremented in one atomic script, shared by 40 gateways; a local deny cache so one abusive client can't melt its shard; and failing open so a limiter outage never becomes an API outage.