What's in 9.12.3
TOD 9.12.3 changes the Remote WinBox session-create limit from three attempts per five minutes to ten attempts per minute per user (#25).
Session retries
When the per-user limit is reached, the error shows the remaining wait in seconds and the API returns a Retry-After header. Rejected attempts do not extend the wait. Failed launches still count, and closing a session does not reset the counter.
The separate client-IP request limit increases from ten to thirty requests per minute. Duplicate-session checks and worker capacity limits remain in place.
Consistent counters
Counter updates and expiry happen atomically in Redis across API workers. The new counters do not inherit the previous five-minute lockout when upgrading.
Updating
Existing installations can update without reinstalling. This patch adds no database migration, required environment setting or Compose change from 9.12.2. Back up, pull or rebuild the application images and recreate the application services, keeping the existing environment file and data volumes. See the update instructions.