How to limit PHP-FPM with cgroup
PHP-FPM is a robust daemon, but unless it is constrained it can exhaust all the memory of a VPS or a shared server: one misconfigured pool or an attack generating many concurrent requests is enough. The definitive fix is cgroup v2, which confines PHP workers inside a process group with limits on CPU, memory, I/O and number of processes.
Read More