Docs
Plugin HubCategoriesTraffic ManagementLimit ReqChangelog

Limit Req Changelog

Released changes to the Limit Req plugin (`limit-req`), newest release first.

22 released changes name limit-req, newest release first — 8 in Apache APISIX, 14 in API7 Gateway. Each row links to the change itself.

Apache APISIX

API7 Gateway

ReleaseDateTypeChange
3.10.4 (opens in API7 Gateway docs)2026-07-27FeatureAdded Redis connection keepalive settings (redis_keepalive_timeout and redis_keepalive_pool) to the Redis and Redis Cluster policies in Limit Conn, Limit Req, and AI Cache, so operators can tune idle timeout and conne… (opens in API7 Gateway docs)
3.10.4 (opens in API7 Gateway docs)2026-07-27FixLimit Conn and Limit Req: Fixed issue: Redis connections were not returned to the keepalive pool, so every request opened a new Redis connection and the configured keepalive settings had no effect. Connections are now… (opens in API7 Gateway docs)
3.10.2 (opens in API7 Gateway docs)2026-06-29FixLimit Request: Fixed issue: The rate-limit counter was keyed so that a limit attached to a shared resource (such as a Consumer) counted each route separately instead of sharing one bucket. The counter is now keyed by… (opens in API7 Gateway docs)
3.10.2 (opens in API7 Gateway docs)2026-06-29Changelimit-req: redis_password (opens in API7 Gateway docs)
3.10.1 (opens in API7 Gateway docs)2026-06-15FixFixed issue: Redis connections were pooled by address only, so two plugin configurations pointing at the same Redis server with different databases, credentials, or TLS settings could reuse each other's connections —… (opens in API7 Gateway docs)
3.10.1 (opens in API7 Gateway docs)2026-06-15FixFixed issue: Under concurrent load, the Redis-backed rate limit could be exceeded because the read and write were not atomic. Enforcement now uses a single atomic operation. (opens in API7 Gateway docs)
3.9.17 (opens in API7 Gateway docs)2026-07-28FeatureAdded Redis connection keepalive settings (redis_keepalive_timeout and redis_keepalive_pool) to the Redis and Redis Cluster policies in Limit Conn, Limit Req, and AI Cache, so operators can tune idle timeout and conne… (opens in API7 Gateway docs)
3.9.17 (opens in API7 Gateway docs)2026-07-28FixLimit Conn and Limit Req: Fixed issue: Redis connections were not returned to the keepalive pool, so every request opened a new Redis connection and the configured keepalive settings had no effect. Connections are now… (opens in API7 Gateway docs)
3.9.16 (opens in API7 Gateway docs)2026-07-10Changelimit-req: redis_password (opens in API7 Gateway docs)
3.9.14 (opens in API7 Gateway docs)2026-06-15FixRate limiting (Limit Count, Limit Req, Limit Conn): Fixed issue: Redis connections that differed only by database number or credentials could share the same keepalive connection pool, so a connection could be reused a… (opens in API7 Gateway docs)
3.9.11 (opens in API7 Gateway docs)2026-04-30FeatureAll plugins now support $secret:// and $env:// references in any configuration field automatically. Previously, only a handful of plugins (jwt-auth, openid-connect, limit-count, authz-keycloak, csrf, limit-req, limit-… (opens in API7 Gateway docs)
3.9.8 (opens in API7 Gateway docs)2026-04-07FixAI Rate Limiting, Limit Conn, Limit Req: Fixed issue: $env:// and $secret:// references in Redis host configuration were passed as literal strings instead of being resolved to their actual values, causing Redis connec… (opens in API7 Gateway docs)
3.9.0 (opens in API7 Gateway docs)2026-01-06FeatureLimit Conn/Limit Req: Supported using Redis and Redis Cluster as the rate limiting data storage backend. (opens in API7 Gateway docs)
3.2.16.3 (opens in API7 Gateway docs)2024-10-21ChangeImproved rate limiting related plugins to be more flexible, allowed for consumer-specific rate limits on a per-service/route basis. For details, see Limit Count Plugin and Limit Req Plugin. (opens in API7 Gateway docs)