What you need to know
A pressure threshold is not the same setting as the final enforced memory ceiling.
Potentially affected
Review unified-hierarchy memory controls and effective parent limits in the Debian trixie systemd.resource-control manual.
DSE recommendation
DSE recommends choosing a pressure-management threshold and an unacceptable-consumption ceiling separately.
A pressure threshold is not the same setting as the final enforced memory ceiling.
Source facts
The Debian systemd.resource-control manual describes MemoryHigh as a throttling threshold: memory can exceed it, but reclaim and process slowdown are applied aggressively. MemoryMax is an absolute boundary that can invoke the unit’s out-of-memory killer when usage cannot be contained. The manual recommends MemoryHigh as the primary control and MemoryMax as a last defense.
Source: Debian systemd manual — systemd.resource-control(5) — systemd — Debian trixie — Debian Manpages.
Applicability
Review unified-hierarchy memory controls and effective parent limits in the Debian trixie systemd.resource-control manual.
DSE recommendation
DSE recommends choosing a pressure-management threshold and an unacceptable-consumption ceiling separately. Measure the service’s working set, startup behavior, and latency under reclaim rather than copying one value into both settings. Inspect the effective parent boundary before increasing a service-level allowance. Preserve memory pressure and OOM evidence so a change addresses observed behavior. Keep service owners informed that slowing under MemoryHigh and termination at MemoryMax are different expected outcomes with different recovery implications.
Verification
In a nonproduction service, apply representative memory demand and inspect effective limits, pressure signals, responsiveness, and any termination event. Confirm monitoring distinguishes reclaim-related slowdown from OOM failure. Verify the recovery procedure preserves required state before authorizing the final production thresholds. Retain the effective service and parent limits with the measured workload. Have the application owner approve both the reclaim-time response and the failure/recovery result, documenting why the two thresholds serve different service decisions.
Official reference
Debian systemd manual — systemd.resource-control(5) — systemd — Debian trixie — Debian Manpages. Reviewed October 20, 2026.
Review the official source
Debian systemd manual — systemd.resource-control(5) — systemd — Debian trixie — Debian Manpages · Verified October 20, 2026
Need help applying this guidance safely?
DSE can help confirm applicability, protect service continuity, and validate the result across physical security and IT systems.
Talk with DSE