marvinandClaude Opus 5.5
87dfcd55b7
Running games always continue; new work is refused when there is no
capacity; abuse is rejected immediately.
- Docker: CPU/memory/pids caps per container (overridable in .env);
uvicorn message size, queue and concurrency limits
- Server abuse limits: connections total/per IP (close 1013), message
rate per connection (token bucket, close 1008 on floods), lobby
creation rate per IP
- Load monitor: event loop lag, CPU of the own cgroup quota and
throttling, with hysteresis (normal/busy/overloaded, severe lag
overloads immediately)
- Admission control: create_lobby and start_game refused while
overloaded or MAX_ACTIVE_GAMES are running; server_status message
broadcast on changes; /health reports load but stays ok
- AI bridge: timeout sent with requests, in-flight cap, circuit breaker
- AI service: bounded workers and queue ("overloaded"), drops expired
requests, degrades to the heuristic agent when busy or too slow
- Website: busy notices, Create/Start disabled when not accepting
games, slow retry when the server is full
- Tests for limiters, load levels, admission control and AI service
limits; docs updated
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
34 lines
1.1 KiB
Bash
34 lines
1.1 KiB
Bash
# Shared secret between the game server and the AI service. Generate one with:
|
|
# python3 -c "import secrets; print(secrets.token_urlsafe(32))"
|
|
AI_SHARED_SECRET=change-me
|
|
|
|
# Optional: comma separated list of allowed websocket origins, e.g. https://game.marvinkrausser.com
|
|
ALLOWED_ORIGINS=
|
|
|
|
# Agent of the AI service: model (falls back to heuristic without checkpoint), heuristic or random
|
|
AI_AGENT=model
|
|
|
|
LOG_LEVEL=INFO
|
|
|
|
# --- Resource limits (hard caps per container) -------------------------------
|
|
SERVER_CPUS=1.0
|
|
SERVER_MEMORY=512M
|
|
AI_CPUS=1.0
|
|
AI_MEMORY=1G
|
|
WEBSITE_CPUS=0.25
|
|
WEBSITE_MEMORY=64M
|
|
|
|
# --- Capacity -----------------------------------------------------------------
|
|
# Games running at the same time; more game starts are refused ("server busy").
|
|
MAX_ACTIVE_GAMES=50
|
|
# Open websocket connections in total / per client IP.
|
|
MAX_CONNECTIONS=500
|
|
MAX_CONNECTIONS_PER_IP=10
|
|
|
|
# --- AI service ---------------------------------------------------------------
|
|
# Decisions computed in parallel, waiting requests before refusing, and queue
|
|
# depth from which the cheap heuristic agent is used instead of the model.
|
|
AI_WORKERS=1
|
|
AI_MAX_QUEUE=64
|
|
AI_DEGRADE_QUEUE=8
|