Worked on the service mesh that routes traffic between Stripe's internal services. The mesh picked backends in a way that couldn't tell when one was overloaded, so I rebuilt it around power-of-two-choices weighted by the CPU and queue depth each backend reports. Overload errors dropped 40% across 50+ services handling 400M+ requests a day, and the services could stop over-provisioning for their hottest replica, which came to roughly $200K a year.
Then added zone-aware routing that spills traffic to neighboring zones when one gets hot, cutting p99 latency 23%, and ran the production rollout through feature-flagged canary ramps gated on error and latency metrics. No incidents.