No DDoS, no hack. Cloudflare outage = one small ClickHouse ACL change → duplicate features → config file too big → Bot Management module hits preallocated memory limit → entire frontline proxy crashes repeatedly. Bravo to #Cloudflare team for transparency 👏

Bun's adding ws.subscriptions! No more manual tracking of which channels a WebSocket is subscribed to. Here's a quick example using WS-Kit:

Working code isn't enough

1/9 Building rate limits in WS-KIt: Token buckets look simple: refill tokens, spend on requests, reject when empty. In production, fairness evaporates when capacity and refill rate aren’t tuned together. Here’s the playbook I use to keep systems responsive and abuse-resistant 🧵

Locks lie.
Fencing tokens don’t.

Here’s why your distributed lock isn’t protecting your data — and how “zombie” processes can corrupt production without you realizing it.