Rate Limiting Next.js API Routes with Upstash Redis (and Why In-Memory Fails on Serverless)

A production pattern for Next.js rate limiting on Vercel: Upstash sliding windows, per-IP and per-email keys, correct 429 headers, and the in-memory trap.