Çok-Katmanlı Dağıtık Hız Sınırlayıcı (Token Bucket & Sliding Window)

resource "aws_elasticache_cluster" "ratelimit_redis" {
  cluster_id           = "tinycto-ratelimit-redis"
  engine               = "redis"
  node_type            = "cache.m7g.xlarge"
  num_cache_nodes      = 1
  parameter_group_name = "default.redis7"
  port                 = 6379
}

apiVersion: apps/v1
kind: Deployment
metadata:
  name: envoy-ratelimit
spec:
  replicas: 4
  template:
    spec:
      containers:
        - name: ratelimit
          image: envoyproxy/ratelimit:v1.6.0
          env:
            - name: REDIS_SOCKET_TYPE
              value: "tcp"
            - name: REDIS_URL
              value: "redis:6379"

-- Redis Sliding Window Token Bucket Lua Script
local key = KEYS[1]
local limit = tonumber(ARGV[1])
local current = tonumber(redis.call('get', key) or "0")
if current + 1 > limit then
  return 0 -- Rejected (429)
else
  redis.call("INCRBY", key, 1)
  if current == 0 then
    redis.call("EXPIRE", key, 1)
  end
  return 1 -- Allowed
end