Footprint

soma-control combines IAM, secrets vault, feature flags, and licensing into one Rust binary. This page records its actual measured memory, startup time, and CPU at idle — the first published production baseline for the SOMA platform. All figures come from a real Docker run; exact conditions are documented below.

soma-control · commit de4f858 · 2026-07-31

5.152MiB

Idle RSS (median)

0.282s

Startup

5.18MiB

Light-load RSS

0.00%

CPU idle (median)

47.7MB

Binary size

52.6MB

Image size

This measurement replaces the “design target: a few tens of MB” language for soma-control on the home page. The rest of the suite baselines will follow as each is measured.

Measurement conditions

Note

Commit: de4f858 (SOMA-Control)
Image target: soma-control
Docker platform: linux/arm64
Load profile: Idle: 60 s settle after first healthy response, then 5 samples 10 s apart via docker stats --no-stream. Light load: ~5 req/s for 60 s (GET /health + GET /iam/.well-known/openid-configuration alternating), then 5 post-load samples.
Measured: 2026-07-31

linux/arm64 Docker container on Apple Silicon (Darwin 25.6.0, aarch64, Docker Desktop 29.1.2); postgres:17 in same Docker network; redis:7-alpine in same Docker network; fresh empty database (startup migrations ran on first boot); idle settle: 60s after first healthy response; idle samples: 5 samples 10s apart via docker stats --no-stream; light load: ~5 req/s for 60s (GET /health + GET /iam/.well-known/openid-configuration alternating in a loop with 1s sleep), then 5 post-load samples 10s apart; startup time = Docker State.StartedAt to first 'soma-control listening' tracing log line (282ms); RSS reported in MiB by docker stats (cgroup working set, excludes file cache); image size = docker image inspect .Size converted to MB; binary size = du -b /usr/local/bin/soma-control inside container converted to MB

Reproduce it

The full benchmark script is at soma-website/scripts/footprint-bench.sh in the soma-website repository (not yet public — repositories are being prepared for release; see the roadmap). It builds the Docker image, starts Postgres and Redis, runs the settle period, samples docker stats, and writes static/footprint.json.

bash
# run from soma-platform/ root
./soma-website/scripts/footprint-bench.sh

Context: what this replaces

soma-control (IAM + Vault + Flags + Licensing) as one binary, versus documented minimums for conventional alternatives at idle. Incumbent figures are from the sources listed in the caveat below.

Function	Conventional stack	soma-control (measured)
Identity	Keycloak — 1,250 MB/pod, min. 2 services	5.152 MiB idle — IAM, vault, flags, and licensing combined
Secrets vault	Infisical — ~16 GB across 3 services (app + Postgres + Redis)	included above — same process, no additional memory
Feature flags	(no incumbent on verified allowlist — see home page comparison)	included above
Licensing	(custom / vendor billing)	included above

The 5.152 MiB figure is the cgroup working set reported by docker stats (excludes file cache) on linux/arm64 in Docker Desktop on Apple Silicon (Darwin 25.6.0, aarch64). Vendor minimums are for idle/light load and grow with usage. Sources: keycloak.org · infisical.com/docs.