JWT middleware auth

Room-scoped messaging

Joi input validation

No sensitive broadcast

Disconnect cleanup

Rate limiting

Message size limit

Connection logging

Redis adapter package

Duplicate pub/sub clients

nginx ip_hash sticky sessions

nginx WebSocket headers

nginx timeout set to 7d

Message queue on disconnect

SIGTERM graceful shutdown

Forced exit timeout

ws.isAlive heartbeat

Dead connection termination

Exponential backoff reconnect

volatile.emit for frequent data

Acknowledgments for critical events

Connection state tracking

Client library provided

Scaling strategy documented

Distinct namespaces

XSS sanitization

CORS via env variable

pingTimeout configuration

pingInterval configuration

Disconnect cleanup

Client library provided

Scaling notes provided

package.json provided

Redis for presence storage

No in-memory large state

Per-IP connection limit

Presence cleanup on disconnect

Client library provided

Connection capacity documented

Scaling strategy documented

package.json provided

SSE used for data stream

SSE not WebSocket

Monitoring: connections tracked

Monitoring: latency tracked

Monitoring: error rates tracked

Monitoring: connection-count alerts

Load testing guidance

Client implementation provided