When using compatible redis services like AWS ElastiCache TLS needs to be enabled:

AWS ElastiCache forbids auth (auth_token or RBAC user_group_ids) without transit_encryption_enabled = true. But the openvsx server builds its rate-limit JedisCluster client without TLS — RateLimitConfig.jedisCluster() reads RedisProperties.getUsername/Password/Cluster.getNodes() but never calls .ssl(...) on the Jedis builder. Turning TLS on at AWS → Jedis handshake hangs → app pods crashloop.