Node.js API Gateway Memory Leak Fixed by Scoping Event Listeners Per Request

·2 views

A Node.js API gateway handling TLS termination, authentication, and microservice fan-out developed a gradual memory leak over several weeks, causing Kubernetes to OOM-kill pods under peak traffic. Heap snapshots revealed accumulating closures, request metadata, and event listeners tied to an internal event bus where an early-exit authentication path skipped cleanup, leaving listeners holding live references. Engineers resolved the issue by creating short-lived, request-scoped EventEmitters, enforcing teardown through try/finally blocks, and adding leak-aware CI tests that asserted bounded object counts across thousands of simulated requests. Operational safeguards including backpressure on accept queues, a soft memory threshold, and crash-loop rollback halting were also introduced. Following these changes, memory usage stabilized, pod restarts ceased, and autoscaling returned to managing load rather than concealing the underlying bug.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

82% of Ad Campaign MCP Servers Cover Only One Platform, Survey Finds

A survey of ad-campaign MCP servers, drawing from the official MCP registry and the community awesome-mcp-servers directory, identified 17 distinct tools available as of July 2026. The analysis found that 14 of those 17 servers — roughly 82% — support only a single advertising platform such as Meta, Google, or TikTok. Just three servers cover two or more platforms, and only one spans six platforms. The fragmented landscape means advertisers relying on AI recommendations often end up managing multiple separate installs, credential stores, and maintenance surfaces. The survey was conducted and published by Adspirer, which itself operates a multi-platform MCP server and acknowledges a conflict of interest in the findings.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

AI Eliminates 90,000 US Jobs While Blocking Entry-Level Candidates From New Ones

A June 2025 Nikkei Asia report found that top US university tech graduates collectively sent out 8,000 resumes with almost no responses, while TechCrunch data showed over 90,000 US positions had been explicitly eliminated due to AI before May 2026. An MIT NANDA report found that 95% of enterprise AI deployments show no profit impact, but the 5% that do generate returns almost exclusively use AI to replace repetitive entry-level tasks such as data processing, code review, and content editing, with savings reflected directly in headcount cuts. The roles most affected include junior technical documentation, customer support, content editing, and entry-level analyst positions in finance and market research. A particularly stark dynamic has emerged where AI tools are being used to screen resumes and conduct first-round interviews, effectively rejecting candidates for roles that AI itself has already made redundant. However, demand remains strong for workers who can design AI evaluation frameworks, manage multi-agent systems, and perform tasks requiring complex human judgment that current AI agents cannot reliably handle alone.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

CSPM, CWPP and CNAPP: How Three Cloud Security Tools Differ and Work Together

Cloud environments on AWS, Azure, and GCP commonly face three distinct security challenges simultaneously: misconfigured infrastructure, vulnerable workloads, and lack of visibility into how these risks connect. CSPM (Cloud Security Posture Management) continuously scans cloud configurations against benchmarks like CIS and PCI-DSS to detect errors such as public storage buckets or over-privileged IAM roles. CWPP (Cloud Workload Protection Platform) focuses on protecting what runs inside the cloud — virtual machines, containers, and serverless functions — checking for vulnerabilities within active workloads. CNAPP (Cloud-Native Application Protection Platform), a term coined by Gartner around 2019, was designed to unify CSPM, CWPP, and additional security layers into a single platform offering end-to-end risk visibility from code to runtime. Industry research consistently identifies misconfiguration, rather than software vulnerability exploitation, as the leading cause of cloud security incidents.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Exonic Builds Reusable Serverless Chat Platform Using DynamoDB Single Table Design

Exonic developed Peanut Gallery, a reusable chat infrastructure designed to be embedded into any application, eliminating the need for each team to build its own solution. The backend uses AWS API Gateway WebSockets for real-time messaging, with a DynamoDB single-table design storing four entities — rooms, messages, memberships, and read receipts — under one composite key structure. This approach keeps all room data in a single partition, allowing full room state retrieval with one query and user room lists via a Global Secondary Index. A Lambda authorizer validates JWT tokens to secure WebSocket connections, while stale connections are cleaned up using TTLs and 410 Gone response handling. The frontend is packaged as a Svelte 5 component library published to npm under the @exonic-za scope, allowing applications to integrate chat as a simple dependency.

0 comments Read more at DEV Community