# High-performance server configuration for Playcast
server:
  hardware:
    cpu:
      isolation: [0-15]  # Isolate CPU cores for game processes
      governor: performance
      turbo_boost: enabled
      hyperthreading: disabled  # Better deterministic performance

    memory:
      huge_pages: 2GB
      swap: disabled
      numa_balancing: disabled

    gpu:
      driver: nvidia-515
      persistence_mode: enabled
      power_limit: max
      memory_clock: +1000
      graphics_clock: +200

    network:
      ring_buffer_size: 4096
      interrupt_coalescing: disabled
      tcp_congestion_control: bbr
      receive_buffer_size: 16MB
      send_buffer_size: 16MB

  kernel:
    scheduler: deadline
    preemption: voluntary
    timer_frequency: 1000Hz
    power_management: performance

  filesystems:
    game_storage:
      type: nvme_ssd
      mount_options: "noatime,nodiratime,nobarrier"
      scheduler: noop

    cache:
      type: tmpfs
      size: 8GB
      mount: /tmp/playcast-cache

  limits:
    max_open_files: 1048576
    max_processes: 32768
    max_locked_memory: unlimited

network:
  interfaces:
    primary:
      mtu: 9000  # Jumbo frames for internal communication
      queue_size: 4096
      interrupt_affinity: [16-31]  # Separate from game cores

  firewall:
    default_policy: DROP
    rules:
      - port: 80,443
        protocol: tcp
        action: ACCEPT
        rate_limit: 1000/min

      - port: 3478,5349  # STUN/TURN
        protocol: udp
        action: ACCEPT

      - port: 49152-65535  # WebRTC data channels
        protocol: udp
        action: ACCEPT

  quality_of_service:
    game_traffic:
      class: EF  # Expedited Forwarding
      priority: 7
      bandwidth: guaranteed_50mbps

    management_traffic:
      class: AF31
      priority: 3
      bandwidth: best_effort

# Kubernetes deployment for game instances
apiVersion: apps/v1
kind: Deployment
metadata:
  name: playcast-game-instances
  namespace: playcast-gaming
  labels:
    app: playcast-game
    tier: gaming
spec:
  replicas: 10
  strategy:
    type: RollingUpdate
    rollingUpdate:
      maxSurge: 2
      maxUnavailable: 1

  selector:
    matchLabels:
      app: playcast-game

  template:
    metadata:
      labels:
        app: playcast-game
    spec:
      nodeSelector:
        node-type: gaming
        gpu-enabled: "true"

      tolerations:
      - key: gaming-workload
        operator: Equal
        value: "true"
        effect: NoSchedule

      containers:
      - name: game-instance
        image: playcast/game-runner:v2.1.0

        resources:
          requests:
            cpu: "4"
            memory: "8Gi"
            nvidia.com/gpu: 1
            ephemeral-storage: "10Gi"
          limits:
            cpu: "6"
            memory: "12Gi"
            nvidia.com/gpu: 1
            ephemeral-storage: "20Gi"

        env:
        - name: GPU_MEMORY_FRACTION
          value: "0.8"
        - name: WEBRTC_ICE_SERVERS
          valueFrom:
            configMapKeyRef:
              name: webrtc-config
              key: ice_servers
        - name: REDIS_CLUSTER_ENDPOINT
          valueFrom:
            secretKeyRef:
              name: redis-credentials
              key: cluster_endpoint

        volumeMounts:
        - name: game-assets
          mountPath: /opt/games
          readOnly: true
        - name: shared-memory
          mountPath: /dev/shm
        - name: gpu-devices
          mountPath: /dev/nvidia0

        securityContext:
          privileged: false
          runAsNonRoot: true
          runAsUser: 1000
          capabilities:
            add: ["SYS_NICE", "SYS_RESOURCE"]
            drop: ["ALL"]

        livenessProbe:
          httpGet:
            path: /health
            port: 8080
          initialDelaySeconds: 30
          periodSeconds: 10
          timeoutSeconds: 5

        readinessProbe:
          httpGet:
            path: /ready
            port: 8080
          initialDelaySeconds: 10
          periodSeconds: 5

      volumes:
      - name: game-assets
        persistentVolumeClaim:
          claimName: game-assets-pvc
      - name: shared-memory
        emptyDir:
          medium: Memory
          sizeLimit: 2Gi
      - name: gpu-devices
        hostPath:
          path: /dev/nvidia0

      affinity:
        nodeAffinity:
          requiredDuringSchedulingIgnoredDuringExecution:
            nodeSelectorTerms:
            - matchExpressions:
              - key: node-type
                operator: In
                values: ["gaming"]
        podAntiAffinity:
          preferredDuringSchedulingIgnoredDuringExecution:
          - weight: 100
            podAffinityTerm:
              labelSelector:
                matchExpressions:
                - key: app
                  operator: In
                  values: ["playcast-game"]
              topologyKey: kubernetes.io/hostname

---
apiVersion: v1
kind: Service
metadata:
  name: playcast-game-service
  labels:
    app: playcast-game
spec:
  type: ClusterIP
  ports:
  - port: 8080
    targetPort: 8080
    name: http
  - port: 9090
    targetPort: 9090
    name: websocket
    protocol: TCP
  selector:
    app: playcast-game

---
apiVersion: autoscaling/v2
kind: HorizontalPodAutoscaler
metadata:
  name: playcast-game-hpa
spec:
  scaleTargetRef:
    apiVersion: apps/v1
    kind: Deployment
    name: playcast-game-instances
  minReplicas: 5
  maxReplicas: 50
  metrics:
  - type: Resource
    resource:
      name: cpu
      target:
        type: Utilization
        averageUtilization: 70
  - type: Resource
    resource:
      name: memory
      target:
        type: Utilization
        averageUtilization: 80
  - type: Pods
    pods:
      metric:
        name: active_sessions
      target:
        type: AverageValue
        averageValue: "8"  # Max 8 concurrent sessions per pod