RSS grew 66348KiB (> 16MiB and > 25%): possible leak
FAIL zero-pubsub-subscriber
port 8080 · backends nats · chaos no
no RSS samples
Status
Check
Detail
PASS
dep zero-pubsub-publisher up
PASS
health up
FAIL
RSS leak signal
RSS grew 293644KiB (> 16MiB and > 25%): possible leak
PASS zero-auth
port 8080 · backends — · chaos no
no RSS samples
Status
Check
Detail
PASS
health up
PASS
RSS plateau (no leak)
What this checks Memory-stability check. We sample the server's resident set size (VmRSS) every 10s across the soak window, take the median of the first third as the baseline, and compare it to the final sample. Growth is only called a leak if it exceeds BOTH the relative threshold (leak_rel_pct) and the absolute threshold (leak_abs_mib). A flat / no-sustained-growth plateau means no leak.
Load applied
Loader
go-wrk
Concurrency
5 (per route)
Duration (min)
1
Mode
gate
PASS zero-basic-secure 🔒
port 8080 · backends postgres · chaos yes
no RSS samples
Status
Check
Detail
PASS
health up
PASS
RSS plateau (no leak)
PASS
chaos survived + recovered
What this checks Memory-stability check. We sample the server's resident set size (VmRSS) every 10s across the soak window, take the median of the first third as the baseline, and compare it to the final sample. Growth is only called a leak if it exceeds BOTH the relative threshold (leak_rel_pct) and the absolute threshold (leak_abs_mib). A flat / no-sustained-growth plateau means no leak.
Load applied
Loader
go-wrk
Concurrency
5 (per route)
Duration (min)
1
Mode
gate
Chaos
enabled
Kill window (s)
10
Backends chaosed
postgres
What this checks Resilience check. We blackhole the backend's IP (iptables DROP on the OUTPUT chain) for the kill window, so the app must keep serving while its backend connection is dead (graceful degradation). After traffic is restored we assert the server process is still alive and that the data route works again. A missed health probe during the blackhole is expected (a worker can block on the dropped connection) and is NOT a failure — only an actual process death or a failure to recover counts.
Load applied
Loader
go-wrk
Concurrency
5 (per route)
Duration (min)
1
Mode
gate
Chaos
enabled
Kill window (s)
10
Backends chaosed
postgres
PASS zero-duckdb
port 8083 · backends — · chaos no
no RSS samples
Status
Check
Detail
PASS
health up
PASS
RSS plateau (no leak)
What this checks Memory-stability check. We sample the server's resident set size (VmRSS) every 10s across the soak window, take the median of the first third as the baseline, and compare it to the final sample. Growth is only called a leak if it exceeds BOTH the relative threshold (leak_rel_pct) and the absolute threshold (leak_abs_mib). A flat / no-sustained-growth plateau means no leak.
Load applied
Loader
go-wrk
Concurrency
5 (per route)
Duration (min)
1
Mode
gate
PASS zero-graphql
port 8080 · backends postgres · chaos yes
no RSS samples
Status
Check
Detail
PASS
health up
PASS
RSS plateau (no leak)
PASS
graphql query OK (200, data.users present)
PASS
chaos survived + recovered
What this checks Memory-stability check. We sample the server's resident set size (VmRSS) every 10s across the soak window, take the median of the first third as the baseline, and compare it to the final sample. Growth is only called a leak if it exceeds BOTH the relative threshold (leak_rel_pct) and the absolute threshold (leak_abs_mib). A flat / no-sustained-growth plateau means no leak.
Load applied
Loader
graphql POST loop
Concurrency
1 (sequential)
Duration (min)
1
Mode
gate
Chaos
enabled
Kill window (s)
10
Backends chaosed
postgres
What this checks Resilience check. We blackhole the backend's IP (iptables DROP on the OUTPUT chain) for the kill window, so the app must keep serving while its backend connection is dead (graceful degradation). After traffic is restored we assert the server process is still alive and that the data route works again. A missed health probe during the blackhole is expected (a worker can block on the dropped connection) and is NOT a failure — only an actual process death or a failure to recover counts.
Load applied
Loader
graphql POST loop
Concurrency
1 (sequential)
Duration (min)
1
Mode
gate
Chaos
enabled
Kill window (s)
10
Backends chaosed
postgres
PASS zero-nosql-secure 🔒
port 8080 · backends cassandra · chaos no
no RSS samples
Status
Check
Detail
PASS
health up
PASS
RSS plateau (no leak)
What this checks Memory-stability check. We sample the server's resident set size (VmRSS) every 10s across the soak window, take the median of the first third as the baseline, and compare it to the final sample. Growth is only called a leak if it exceeds BOTH the relative threshold (leak_rel_pct) and the absolute threshold (leak_abs_mib). A flat / no-sustained-growth plateau means no leak.
Load applied
Loader
go-wrk
Concurrency
5 (per route)
Duration (min)
1
Mode
gate
PASS zero-redis
port 8080 · backends redis · chaos yes
no RSS samples
Status
Check
Detail
PASS
health up
PASS
RSS plateau (no leak)
PASS
chaos survived + recovered
What this checks Memory-stability check. We sample the server's resident set size (VmRSS) every 10s across the soak window, take the median of the first third as the baseline, and compare it to the final sample. Growth is only called a leak if it exceeds BOTH the relative threshold (leak_rel_pct) and the absolute threshold (leak_abs_mib). A flat / no-sustained-growth plateau means no leak.
Load applied
Loader
go-wrk
Concurrency
5 (per route)
Duration (min)
1
Mode
gate
Chaos
enabled
Kill window (s)
10
Backends chaosed
redis
What this checks Resilience check. We blackhole the backend's IP (iptables DROP on the OUTPUT chain) for the kill window, so the app must keep serving while its backend connection is dead (graceful degradation). After traffic is restored we assert the server process is still alive and that the data route works again. A missed health probe during the blackhole is expected (a worker can block on the dropped connection) and is NOT a failure — only an actual process death or a failure to recover counts.
Load applied
Loader
go-wrk
Concurrency
5 (per route)
Duration (min)
1
Mode
gate
Chaos
enabled
Kill window (s)
10
Backends chaosed
redis
PASS zero-s3
port 8080 · backends rustfs · chaos yes
no RSS samples
Status
Check
Detail
PASS
health up
PASS
RSS plateau (no leak)
PASS
filestore round-trip (upload+download) OK
PASS
chaos survived + recovered
What this checks Memory-stability check. We sample the server's resident set size (VmRSS) every 10s across the soak window, take the median of the first third as the baseline, and compare it to the final sample. Growth is only called a leak if it exceeds BOTH the relative threshold (leak_rel_pct) and the absolute threshold (leak_abs_mib). A flat / no-sustained-growth plateau means no leak.
Load applied
Loader
filestore (upload→download→delete)
Concurrency
8
Duration (min)
1
Mode
gate
Chaos
enabled
Kill window (s)
10
Backends chaosed
rustfs
What this checks Resilience check. We blackhole the backend's IP (iptables DROP on the OUTPUT chain) for the kill window, so the app must keep serving while its backend connection is dead (graceful degradation). After traffic is restored we assert the server process is still alive and that the data route works again. A missed health probe during the blackhole is expected (a worker can block on the dropped connection) and is NOT a failure — only an actual process death or a failure to recover counts.
Load applied
Loader
filestore (upload→download→delete)
Concurrency
8
Duration (min)
1
Mode
gate
Chaos
enabled
Kill window (s)
10
Backends chaosed
rustfs
PASS zero-search
port 8080 · backends solr · chaos no
no RSS samples
Status
Check
Detail
PASS
health up
PASS
RSS plateau (no leak)
What this checks Memory-stability check. We sample the server's resident set size (VmRSS) every 10s across the soak window, take the median of the first third as the baseline, and compare it to the final sample. Growth is only called a leak if it exceeds BOTH the relative threshold (leak_rel_pct) and the absolute threshold (leak_abs_mib). A flat / no-sustained-growth plateau means no leak.
Load applied
Loader
go-wrk
Concurrency
5 (per route)
Duration (min)
1
Mode
gate
PASS zero-sql-secure
port 8080 · backends mysql · chaos yes
no RSS samples
Status
Check
Detail
PASS
health up
PASS
RSS plateau (no leak)
PASS
chaos survived + recovered
What this checks Memory-stability check. We sample the server's resident set size (VmRSS) every 10s across the soak window, take the median of the first third as the baseline, and compare it to the final sample. Growth is only called a leak if it exceeds BOTH the relative threshold (leak_rel_pct) and the absolute threshold (leak_abs_mib). A flat / no-sustained-growth plateau means no leak.
Load applied
Loader
go-wrk
Concurrency
5 (per route)
Duration (min)
1
Mode
gate
Chaos
enabled
Kill window (s)
10
Backends chaosed
mysql
What this checks Resilience check. We blackhole the backend's IP (iptables DROP on the OUTPUT chain) for the kill window, so the app must keep serving while its backend connection is dead (graceful degradation). After traffic is restored we assert the server process is still alive and that the data route works again. A missed health probe during the blackhole is expected (a worker can block on the dropped connection) and is NOT a failure — only an actual process death or a failure to recover counts.
Load applied
Loader
go-wrk
Concurrency
5 (per route)
Duration (min)
1
Mode
gate
Chaos
enabled
Kill window (s)
10
Backends chaosed
mysql
PASS zero-sqlite
port 8081 · backends — · chaos no
no RSS samples
Status
Check
Detail
PASS
health up
PASS
RSS plateau (no leak)
What this checks Memory-stability check. We sample the server's resident set size (VmRSS) every 10s across the soak window, take the median of the first third as the baseline, and compare it to the final sample. Growth is only called a leak if it exceeds BOTH the relative threshold (leak_rel_pct) and the absolute threshold (leak_abs_mib). A flat / no-sustained-growth plateau means no leak.
Load applied
Loader
go-wrk
Concurrency
5 (per route)
Duration (min)
1
Mode
gate
PASS zero-timeseries
port 8080 · backends influx · chaos no
no RSS samples
Status
Check
Detail
PASS
health up
PASS
RSS plateau (no leak)
What this checks Memory-stability check. We sample the server's resident set size (VmRSS) every 10s across the soak window, take the median of the first third as the baseline, and compare it to the final sample. Growth is only called a leak if it exceeds BOTH the relative threshold (leak_rel_pct) and the absolute threshold (leak_abs_mib). A flat / no-sustained-growth plateau means no leak.
Load applied
Loader
go-wrk
Concurrency
5 (per route)
Duration (min)
1
Mode
gate
PASS zero-ws-client 🔒
port 8080 · backends — · chaos no
no RSS samples
Status
Check
Detail
PASS
health up
PASS
RSS plateau (no leak)
What this checks Memory-stability check. We sample the server's resident set size (VmRSS) every 10s across the soak window, take the median of the first third as the baseline, and compare it to the final sample. Growth is only called a leak if it exceeds BOTH the relative threshold (leak_rel_pct) and the absolute threshold (leak_abs_mib). A flat / no-sustained-growth plateau means no leak.
Load applied
Loader
go-wrk
Concurrency
5 (per route)
Duration (min)
1
Mode
gate
Framework probes
Allocation probe (GET /ping → pong)
backing
allocs/req
bytes/req
latency/req
alloc-time/req
dispatch-only/req
leaked
fallback
20.00
13663
60734.7 ns
4392.5 ns
56342.2 ns
0 bytes OK
top call-sites (alloc-probe-fallback.json)
site
count/req
bytes/req
0x1896ed4
4.00
8448
0x1896744
1.00
3136
0x1392697
1.00
768
0x13923c3
1.00
256
0x13931fe
1.00
248
Route probe (literal static routes)
routes
1000
registration allocs
9
registration bytes
625680
bytes / route
625.7
route match time
549.29 ns/req
match-time allocs
0
TLS-secured datasource Datasource access was enabled through a TLS certificate (connection encrypted); the server certificate was not CA-verified.
TLS configuration
Backend
postgres
TLS mode
require
CA root path
/drone/src/tls/rootCA.pem
Verified
Encrypted, not CA-verified
TLS-secured datasource Datasource access was enabled through a TLS certificate (connection encrypted); the server certificate was not CA-verified.
TLS configuration
Backend
cassandra
TLS mode
true
CA root path
—
Verified
Encrypted, not CA-verified
TLS-secured datasource Datasource access was enabled through a TLS certificate (connection encrypted); the server certificate was not CA-verified.