Modeling Token Buckets in PlusCal and TLA+
Summary
Token bucket approach helps avoid retry storms in distributed systems by controlling retries with tokens. The article models the system in PlusCal and TLA+, identifies a head-of-line blocking bug in sequential drivers, and presents a fail-fast fix, plus a Pure TLA+ perspective and visualization guidance, highlighting the value of formal methods for robust client-side design.