DoS via runtime execution

Even valid queries can cause excessive runtime work through expensive resolvers or large result sets.

Symptoms

• High resolver time
• Excessive memory usage
• Backend saturation

Why it matters

Runtime-based DoS is costly to recover from and difficult to diagnose.

Practices that address this

• Pagination limits

Patterns that address this

• Validation pagination limits
• Resolver pagination limits
• Result size limits
• Execution timeouts
• Query complexity limits