could it be due to writes?

If this is your cluster ID starting with

v09f

, it's because you most likely ran out of burst capacity because some queries were taking up too much CPU to execute in older versions of Typesense. I see you've already upgraded to v28, which is great. For your volume of traffic, I would also recommend upgrading to 2vCPU (non-burst) so that you don't run into throttling issues in the future. Burst CPU types are only meant for very low volume traffic use-cases, with sporadic requests here and there.

@Jason Bosco thank you, has this really improved in v28, it's like 20 times faster