Summary
Praxis requires layered overload protection. A traffic spike can exhaust
CPU, memory, and file descriptors for the entire process because the
only mechanism is a per-listener semaphore.
Overload Protection
Current state: Per-listener max_connections semaphore returns
503 + Retry-After: 1 when full.
Needed Next
- Global connection limit
- Per-cluster connection limits
- Memory pressure monitoring
- Queue depth limits per cluster
- Degradation strategy
Summary
Praxis requires layered overload protection. A traffic spike can exhaust
CPU, memory, and file descriptors for the entire process because the
only mechanism is a per-listener semaphore.
Overload Protection
Current state: Per-listener
max_connectionssemaphore returns503 +
Retry-After: 1when full.Needed Next