Benchmarking LLM-Guided Control-Plane Policies for Backend Fault Isolation in HAProxy
On the map: LLM safety and security → Prompt injection and agent security
Abstract (arXiv)
Static load balancers cannot mitigate a backend that is degraded rather than down: round-robin and least-connections keep routing traffic to a server returning HTTP 500s until an operator intervenes. We ask whether a Large Language Model can replace the static routing policy itself, reading HAProxy and Prometheus telemetry every 10 seconds and isolating faulty servers through guardrailed calls to the HAProxy Data Plane API. On a reproducible benchmark with a persistent structural fault built into roughly one-third of a heterogeneous fleet, we sweep 15 open-weight models across five families (0.35B to 35B total parameters; dense, mixture-of-experts, and efficient-sparse architectures), reasoning modes, fleet scales of 3 to 9 backends, and two routing algorithms, totaling 240 runs. We find a capability threshold near 3B active parameters. Below it, LLM policies are typically unreliable and sometimes worse than no policy; above it, every model, regardless of architecture, saturates near an 88% reduction in client-perceived 5xx errors over the static baseline. The threshold is approximate: Gemma 4 E2B clears it with 2B active parameters, while the dense 3B Granite 4.0 Micro does not. The availability gain has costs. Draining concentrates load onto surviving servers, inflating tail latency 2.6 to 2.8 times, and enabling reasoning multiplies token spend roughly tenfold, overrunning the control interval and degrading effectiveness. The efficient operating point is a supra-threshold model in its cheapest non-reasoning mode, wrapped inside deterministic guardrails.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Prompt injection and agent security, one of 12 directions in LLM safety and security. Builds on 9 of its 33 references that are in the map. First posted on arXiv 11 Aug 2026.
Builds on
9 of 33 references.
References · 9
- 2024NetLLM: Adapting Large Language Models for Networkingcited by 78
- 2025Leveraging Large Language Models for Effective and Explainable Multi-Agent Credit Assignmentcited by 18
- 2024Towards Intent-Based Network Management: Large Language Models for Intent Extraction in 5G Core Networkscited by 17
- 2026Agentic AI Empowered Intent-Based Networking for 6Gcited by 7
- 2025NetIntent: Leveraging Large Language Models for End-to-End Intent-Based SDN Automationcited by 6
- 2025HAS-GPU: Efficient Hybrid Auto-scaling with Fine-grained GPU Allocation for SLO-aware Serverless Inferencescited by 4
- 2025IntentContinuum: Using LLMs to Support Intent-Based Computing Across the Compute Continuumcited by 2
- 2025Large Language Models for Solving Economic Dispatch Problemcited by 2
- 2024Kubernetes in Action: Exploring the Performance of Kubernetes Distributions in the Cloudcited by 1
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026FailureAtlas: A Taxonomy of Failure Modes in Multi-Provider LLM Serving Infrastructure
- 2026Continuous Discovery of Vulnerabilities in LLM Serving Systems with Fuzzing
- 2026Towards Resiliency in Large Language Model Serving with KevlarFlow
- 2024BELLS: A Framework Towards Future Proof Benchmarks for the Evaluation of LLM Safeguards
- 2026A Taxonomy of Runtime Faults in Model Context Protocol Servers
- 2026LUMEN: Coordinated Failure Recovery for Distributed LLM Serving
- 2026HWE-Bench: Benchmarking LLM Agents on Real-World Hardware Bug Repair Tasks
- 2026RouteGuard: Certifying Routing Gain in LLM Multi-Agent Systems When Complementarity Is Not Enough