Harden runtime budgets: DB pool, CLI concurrency, timeouts, and metrics.

Add shared CLI budget/timeout with force-close, parallel port-traffic dispatch, unified shutdown, bounded audit queue, output/log caps, and /metrics probes.

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
oliver 2026-08-02 18:02:43 +08:00
parent 2068ce3d04
commit d56020d84c
23 changed files with 824 additions and 102 deletions

View file

@ -59,3 +59,15 @@ NETX_UME_NOTIFICATION_TOPIC=ALARM
# NETX_RUN_INLINE_SCHEDULERS=false
# NETX_AUDIT_ASYNC=true
# NETX_AUDIT_SAMPLE_N=1
# DB pool (QueuePool). Aim: pool_size + max_overflow >= HTTP peak + NETX_CLI_MAX_CONCURRENT + UME WS burst.
# NETX_DB_POOL_SIZE=20
# NETX_DB_MAX_OVERFLOW=20
# NETX_DB_POOL_RECYCLE_SEC=1800
# NETX_DB_POOL_TIMEOUT_SEC=30
# Global SSH/Netmiko concurrency across discover / collect / config_sync / port_traffic.
# NETX_CLI_MAX_CONCURRENT=20
# NETX_CLI_TIMEOUT_POOL_WORKERS=16
# NETX_PORT_TRAFFIC_DISPATCH_WORKERS=4
# NETX_AUDIT_QUEUE_MAX=5000
# NETX_NE_COLLECT_MAX_OUTPUT_BYTES=8388608
# NETX_WEBCRT_SESSION_LOG_MAX_BYTES=4194304