Rate limiting at scale: over-allow or under-allow?

The five rate limiting algorithms and the boundary bug that separates them, why 50 servers each counting alone let 10 times the limit through, and how to design a limiter that keeps working, on purpose, when a Redis node dies.