Your Rate Limiter Is a Stampede at the Window Boundary

The fixed window lets double the traffic through at the boundary, the distributed counter is an agreement problem in disguise, and the token bucket is the honest answer.