Docs
Plugin HubCategoriesTraffic ManagementLimit CountChangelog

Limit Count Changelog

Released changes to the Limit Count plugin (`limit-count`), newest release first.

56 released changes name limit-count, newest release first — 32 in Apache APISIX, 24 in API7 Gateway. Each row links to the change itself.

Apache APISIX

ReleaseDateTypeChange
3.18.02026-08-18FeatureAdd Redis Sentinel backend, sliding window and delayed sync support
3.18.02026-08-18Fixcommit() must report the window-weighted remaining
3.18.02026-08-18FeatureEncrypt redis_password and sentinel_password in limit-count, limit-req and limit-conn
3.18.02026-08-18FixIsolate redis-sentinel keepalive pools by database and credentials
3.18.02026-08-18FixMake the sliding-window limiter check-and-increment atomic
3.18.02026-08-18FixUpgrade the redis-cluster library so NOSCRIPT is not treated as a node failure
3.18.02026-08-18FixValidate variable-resolved count/time_window bounds
3.17.02026-06-11FeatureUpgrade lua-resty-limit-traffic to v1.2.0
3.17.02026-06-11ChangeUse evalsha with NOSCRIPT fallback for Redis script execution
3.16.02026-04-07FeatureSupport configuring multiple rules
3.16.02026-04-07FeatureSupport configuring variables in limit-conn, limit-count and ai-rate-limiting
3.16.02026-04-07FeatureSupport header prefix in limit-count rules
3.16.02026-04-07ChangeThrow panic error upon invalid parent
3.15.02026-02-02FixUse meta parent to identify plugin source
3.8.02024-01-09FixAll consumers should share the same counter (limit-count)
3.8.02024-01-09FeatureAllow to use environment variables for limit-count plugin settings
3.8.02024-01-09FeatureSet minLength of redis_cluster_nodes to 1 for limit-count plugin
3.5.02023-08-29FixX-RateLimit-Reset shouldn't be set to 0 after request be rejected
3.3.02023-04-30Featurelimit-count plugin supports username and ssl for redis policy
3.2.02023-03-06Featurelimit-count plugin supports setting TLS to access Redis cluster
3.2.02023-03-06Featurelimit-count plugin supports X-RateLimit-Reset
3.0.0-beta—FixIn limit-count plugin, different routes with the same configuration should not share the same counter
2.15.02022-07-22FixEnsure both group and disable configurations can be used in limit-count
2.13.02022-03-21FixKeep the counter if the plugin conf is the same
2.12.02022-01-20FeatureAdd constant key type
2.12.02022-01-20FeatureAllow sharing counter
2.11.02021-11-23FeatureSupport multiple variables as key
2.6.02021-05-21FixEnsure atomic operation in limit-count plugin
2.6.02021-05-21ChangeEnsure redis cluster name is set correctly
2.0.02020-10-20Featurelimit-count support to use redis cluster.
1.5.02020-08-06Fixfixed: failed to read redis.ttl in limit-count plugin. 1928
0.9.02019-11-15FeatureLimit Count: Supported global limit count with Redis Server.

API7 Gateway

ReleaseDateTypeChange
3.10.4 (opens in API7 Gateway docs)2026-07-27FixFixed issue: With window_type: sliding and delayed synchronization, the remaining quota was reported without the sliding-window weighting, so the gateway admitted noticeably more requests than configured around window… (opens in API7 Gateway docs)
3.10.4 (opens in API7 Gateway docs)2026-07-27FeatureThe Apisix-Plugins debug response header now lists the plugins that actually ran, in execution order and annotated with the phase each ran in (for example limit-count#access, response-rewrite#header_filter), instead o… (opens in API7 Gateway docs)
3.10.3 (opens in API7 Gateway docs)2026-07-14FeatureAdded Redis connection keepalive settings (redis_keepalive_timeout and redis_keepalive_pool) for the Redis and Redis Cluster policies in Limit Count, Limit Count Advanced, GraphQL Limit Count, and AI Rate Limiting, so… (opens in API7 Gateway docs)
3.10.2 (opens in API7 Gateway docs)2026-06-29FixFixed issue: When count or time_window was resolved from a variable, an invalid value (non-integer, zero or negative, or beyond the safe integer range) was silently ignored, which could disable the rate limit entirely… (opens in API7 Gateway docs)
3.10.2 (opens in API7 Gateway docs)2026-06-29FixFixed issue: With the Redis policy and sliding-window counting, the check-and-increment was not atomic, so concurrent requests could exceed the configured limit. Counting is now performed atomically with a Redis script. (opens in API7 Gateway docs)
3.10.2 (opens in API7 Gateway docs)2026-06-29Changelimit-count, limit-count-advanced, and graphql-limit-count: redis_password, sentinel_password (opens in API7 Gateway docs)
3.10.1 (opens in API7 Gateway docs)2026-06-15FixFixed issue: Redis connections were pooled by address only, so two plugin configurations pointing at the same Redis server with different databases, credentials, or TLS settings could reuse each other's connections —… (opens in API7 Gateway docs)
3.10.1 (opens in API7 Gateway docs)2026-06-15FeatureThe advanced rate-limiting capabilities formerly provided only by limit-count-advanced are now available directly in limit-count: the redis-sentinel policy, sliding-window counting (window_type set to sliding), multip… (opens in API7 Gateway docs)
3.9.17 (opens in API7 Gateway docs)2026-07-28FixFixed issue: With window_type: sliding and delayed synchronization, the remaining quota was reported without the sliding-window weighting, so the gateway admitted noticeably more requests than configured around window… (opens in API7 Gateway docs)
3.9.17 (opens in API7 Gateway docs)2026-07-28FeatureThe Apisix-Plugins debug response header now lists the plugins that actually ran, in execution order and annotated with the phase each ran in (for example limit-count#access, response-rewrite#header_filter), instead o… (opens in API7 Gateway docs)
3.9.16 (opens in API7 Gateway docs)2026-07-10FeatureAdded Redis connection keepalive settings (redis_keepalive_timeout and redis_keepalive_pool) for the Redis and Redis Cluster policies in Limit Count, Limit Count Advanced, GraphQL Limit Count, and AI Rate Limiting, so… (opens in API7 Gateway docs)
3.9.16 (opens in API7 Gateway docs)2026-07-10Changelimit-count, limit-count-advanced, and graphql-limit-count: redis_password, sentinel_password (opens in API7 Gateway docs)
3.9.14 (opens in API7 Gateway docs)2026-06-15FixRate limiting (Limit Count, Limit Req, Limit Conn): Fixed issue: Redis connections that differed only by database number or credentials could share the same keepalive connection pool, so a connection could be reused a… (opens in API7 Gateway docs)
3.9.14 (opens in API7 Gateway docs)2026-06-15FeatureThe advanced rate-limiting capabilities previously provided by limit-count-advanced are now built into limit-count. You can configure a sliding window (window_type set to sliding), the redis-sentinel policy, multiple… (opens in API7 Gateway docs)
3.9.11 (opens in API7 Gateway docs)2026-04-30FeatureAll plugins now support $secret:// and $env:// references in any configuration field automatically. Previously, only a handful of plugins (jwt-auth, openid-connect, limit-count, authz-keycloak, csrf, limit-req, limit-… (opens in API7 Gateway docs)
3.9.11 (opens in API7 Gateway docs)2026-04-30FixFixed issue: Redis credentials (redis_password, redis_username, sentinel_password) were embedded in rate-limiting group keys, exposing sensitive information in Redis keyspace and APISIX logs. (opens in API7 Gateway docs)
3.9.7 (opens in API7 Gateway docs)2026-03-25FeatureAdded a form-based UI for the Limit Count plugin in Dashboard, supporting visual configuration of Local, Redis, and Redis Cluster policies without manually editing JSON/YAML. (opens in API7 Gateway docs)
3.9.4 (opens in API7 Gateway docs)2026-02-03FixFixed issue: The counter data could be inaccurate if the Gateway crashed unexpectedly. (opens in API7 Gateway docs)
3.9.2 (opens in API7 Gateway docs)2026-01-19FixFixed issue: The rate limiting counter was shared when the same rate-limiting configuration was applied across multiple consumers (introduced in 3.8.5). (opens in API7 Gateway docs)
3.8.22 (opens in API7 Gateway docs)2026-01-19FixFixed issue: The rate limiting counter was shared when the same rate-limiting configuration was applied across multiple consumers (introduced in 3.8.5). (opens in API7 Gateway docs)
3.8.17 (opens in API7 Gateway docs)2025-11-10FixFixed issue: The policy field of plugins, such as limit-count and limit-count-advanced, is optional (should be required). (opens in API7 Gateway docs)
3.8.5 (opens in API7 Gateway docs)2025-06-16FixFixed issue: Consumers did not share the same counter in the limit-count plugin. (opens in API7 Gateway docs)
3.2.16.4 (opens in API7 Gateway docs)2024-11-01FixFixed issue: Dynamic updates to rate limiting parameters in the Limit Count Plugin are now reflected in the data plane. (opens in API7 Gateway docs)
3.2.16.3 (opens in API7 Gateway docs)2024-10-21ChangeImproved rate limiting related plugins to be more flexible, allowed for consumer-specific rate limits on a per-service/route basis. For details, see Limit Count Plugin and Limit Req Plugin. (opens in API7 Gateway docs)