Should be done globally in http-server to prevent DOS as early as possible. Two options: - Immediately close the socket connection after accept. - Close the server socket if above limit and reopen again if below limit.