Why a GC, and reachability
You never free memory in JavaScript — you make objects unreachable. V8 uses a tracing GC: from a fixed set of roots it marks everything transitively reachable; the rest is garbage. Tracing vs reference counting, and why liveness is reachability.
In C you write malloc then free, and forgetting the second leaks; freeing twice corrupts the heap; freeing too early gives you a use-after-free that an attacker turns into code execution. Now add closures that capture variables, objects shared across three callbacks, and a Map someone holds onto somewhere. Deciding, by hand, the exact instant each allocation is safe to release is not merely hard — for a language this dynamic it is hopeless. So JavaScript does not ask you to. It asks a different question: can the program still reach this object?
Manual memory management cannot survive shared references
The performance/04-gc/01-gc-basics lesson frames GC from the ops side; this track takes the engine’s view. Start with why the engine has to do this at all.
Manual free() requires a single, knowable owner for every allocation — the place responsible for releasing it. JavaScript destroys that assumption on purpose. A closure captures a variable and outlives the function that made it. An object is pushed into an array, passed to a callback, and stored on this, all at once — three references, no single owner. A Promise chain keeps a value alive across ticks of the event loop you cannot see from the call site.
function makeCounter() {
let count = 0; // captured by the closure
return () => ++count; // this fn keeps `count` alive
}
const next = makeCounter(); // who is allowed to free `count`?count lives exactly as long as next does — and next might be stored in a global, attached to a DOM node, or dropped on the next line. No human reliably knows when. So the engine answers a mechanically-decidable proxy question instead: is this object reachable from somewhere the program can still touch? If not, it can never affect the program’s future, so its memory is safe to take back.
Reachability: roots, then transitive closure
A tracing garbage collector models the heap as a directed graph: objects are nodes, references (a property holding another object, an array element, a captured variable) are edges. Collection has two conceptual phases — find what is alive, reclaim everything else.
“Alive” is defined by reachability from the roots. The roots are the entry points the running program inherently has access to, that the GC treats as always-live:
- the call stack — every local variable and temporary in every active frame, plus values held in CPU registers;
- the global object (
globalThis/window) and its property graph; - handles / persistent handles from the embedder — the C++ host (Node, Chrome) holds V8 objects through handle scopes; a
Persistenthandle pins an object as a root even with no JS reference to it.
Starting from those roots, the GC follows every edge transitively. Everything it can reach is live; everything it cannot is garbage. Note the asymmetry: the collector never enumerates dead objects, it enumerates live ones and the dead are simply whatever is left over.
The right-hand island matters: X and Y reference each other, so each has an incoming reference, yet no root reaches either. A tracing GC collects them without a second thought. Hold that example — it is exactly where the older approach breaks.
Tracing vs reference counting
The other classic strategy is reference counting: each object carries a count of how many references point at it; when the count hits zero, free immediately. It is simple, gives prompt reclamation, and spreads cost evenly. CPython uses it as its primary mechanism; Swift’s ARC and C++ shared_ptr are refcounting.
It has one fatal flaw for a language full of shared, cyclic structures: it cannot reclaim cycles. In the island above, X references Y and Y references X — each count stays at 1 forever, so neither is ever freed, even though the program can never touch them again. Cycles are everywhere in real code: a parent node holding children that hold a back-pointer to the parent, a doubly-linked list, a Promise capturing a closure that captures the promise.
let a = {};
let b = {};
a.peer = b;
b.peer = a; // refcount(a) = 1, refcount(b) = 1
a = null;
b = null; // both still point at each other -> counts never reach 0Tracing has no such problem: once a and b are dropped from their roots, no root path reaches the pair, so a trace declares both dead regardless of the cycle. This is the reason V8 (and every production JS engine) is tracing, not refcounting. The cost is that a trace is a discrete event with a pause, rather than work amortised per reference — which is the entire subject of the next five lessons.
- Reclaims reference cycles
- tracing only
- Prompt (immediate) reclamation
- refcounting
- Cost model (tracing)
- batched pause
- Cost model (refcount)
- per-store inc/dec
- V8 / SpiderMonkey / JSC
- tracing
- CPython primary mechanism
- refcount + cycle GC
Liveness is an over-approximation
There is a precise meaning of “this object will never be used again” — but it is uncomputable; it would require predicting the program’s future. So the GC uses reachable as a conservative, computable stand-in. Reachability over-approximates liveness: if an object is reachable, the GC keeps it, whether or not the program will actually use it again.
That gap is the source of nearly every “memory leak” in a GC’d language. The object is genuinely dead in spirit — you are done with it — but a reference somewhere (a cache entry, a stale listener, a captured variable) keeps it reachable, so the GC correctly, dutifully, keeps it alive. You do not fix that by “freeing”; you fix it by severing the last reference. We catalogue exactly how reachability leaks in lesson 05.
Two objects reference each other and nothing else references either. A reference-counting collector and a tracing collector both run. What happens?
A Node C++ addon holds a V8 Persistent handle to an object, but no JavaScript variable references it. Is the object collectible?
Order the conceptual steps a tracing collector takes to decide what to reclaim.
- 1 Identify the roots: call stack, global object, embedder handles
- 2 Mark each root-referenced object as reachable
- 3 Follow every reference edge transitively, marking each object reached
- 4 Treat every object NOT marked reachable as garbage and reclaim it
▸Why this works
Why not just expose a free() and trust the programmer? Because the same expressiveness that makes JavaScript pleasant — first-class functions, closures, objects shared freely — makes single-ownership impossible to track by hand at scale. Languages that keep manual control (C, C++) pay for it with a whole class of bugs (use-after-free, double-free, leaks) that simply cannot exist in a tracing-GC language. The GC trades those bugs for pause-time and a subtler leak: unintended reachability.
- 01What are the GC roots in V8, and why does the GC start from them?
- 02Why is V8 a tracing collector instead of using reference counting?
- 03What is the difference between 'live' and 'reachable', and why does it matter?
JavaScript does not let you free memory because shared references and closures make single-ownership impossible to track by hand. Instead V8 runs a tracing garbage collector: it models the heap as a graph and defines “alive” as reachable from a fixed set of roots — the call stack and registers, the global object, and embedder persistent handles. From the roots it marks everything transitively reachable; whatever is left is garbage. This is why tracing reclaims reference cycles that reference counting (which frees an object when its count hits zero) cannot: a mutually-referencing island keeps each count above zero forever, but no root path reaches it, so a trace collects it. Reachability is a conservative over-approximation of true liveness — every leak in a GC’d language is an object that is dead-in-spirit but still reachable through some forgotten reference. You do not free; you drop the last reference and let the next collection notice. Now when you see RSS climbing on a healthy Node service, you know the first question to ask is not “where did the GC fail?” but “what reference am I still holding?”
Practice
Start at the top. Tasks go easiest → hardest: recall a fact, apply it to a case, then a senior-level stretch. Open one, attempt it, then reveal.
appears again in184
- Why GraphQL gets N+1junior
- DataLoader mechanics: tick-boundary batchingmiddle
- Batch function contracts: ordering, shapes, errorsmiddle
- Federation and lookahead: batching beyond DataLoadermiddle
- Query complexity defences: depth, cost, persisted queriesmiddle
- Senior GraphQL API: scheduling contract, tenant isolation, observabilitysenior
- Why idempotency: making retries safejunior
- Server-side state machine: four states of an idempotency keymiddle
- Outbox and inbox: effectively-once across the dual-write boundarymiddle
- Concurrency and cache architecture for idempotency at scalesenior
- Observability, production failures, and global-scale designsenior
- The event loop: one thread, three queuesjunior
- Tasks, microtasks, and scheduler.yield()middle
- Microtask starvation, Long Tasks, and LoAFsenior
- Node.js event loop: phases, nextTick, and loop lagsenior
- React, Vue, and INP observability in productionsenior
- The render pipeline: six stages from bytes to pixelsjunior
- Stage costs and the renderer process modelmiddle
- Invalidation, dirty bits, and containmiddle
- Compositor layers: promotion, overlap, and GPU memorymiddle
- DevTools flame strip and the frame lifecyclemiddle
- Layout thrash: forced synchronous layoutsenior
- BeginMainFrame, compositor-driven animations, and GPU memorysenior
- Production observability: LoAF, INP, and the full attack surfacesenior
- What V8 is and why performance varies 100×junior
- V8''''s four-tier JIT pipeline and profile-guided tieringmiddle
- Hidden classes, transition trees, and memory layoutmiddle
- Inline caches, IC states, and deoptimizationmiddle
- Orinoco GC: parallel scavenger, concurrent marking, and write barriersmiddle
- TurboFan''''s speculative engine and the deopt-loop trapsenior
- V8 in production: isolates, pointer compression, and real failuressenior
- Service worker lifecycle and cache strategiesmiddle
- Service worker edge cases: version skew, durability, and navigation trapssenior
- What the reconciler does: render vs commitjunior
- The fiber object and the double-buffer treemiddle
- Render phase purity and commit phase sub-stepsmiddle
- Reconciliation: diffing heuristics and the key trapmiddle
- Priority lanes, time-slicing, and useTransitionmiddle
- Bailout, memoisation, and tearingsenior
- React Profiler, the Compiler, and production observabilitysenior
- Rendering strategies: SSG, SSR, ISR, streaming, and hydrationjunior
- SSG, SSR, ISR, streaming, and RSC — how each worksmiddle
- Hydration cost: selective, progressive, islands, resumabilitymiddle
- Hydration mismatch: causes, detection, and the determinism rulesenior
- RSC, per-route strategy, and production observabilitysenior
- Core Web Vitals: what LCP, INP, and CLS measurejunior
- CLS: why layout shifts happen and how to stop themmiddle
- Metric tradeoffs, RUM attribution, and the CI+field loopsenior
- The full picture: URL to LCP to INP as a relay racejunior
- Eight layers traced: from the service worker to the second navigationmiddle
- Five canonical breaks: where production reliably diessenior
- The three-track method: reading traces and building a monitored systemsenior
- What is a cache stampede and why it makes things worsejunior
- Lock and single-flight: bounding concurrent rebuildsmiddle
- XFetch: coordination-free probabilistic early expirationmiddle
- Stale-while-revalidate and CDN request coalescingmiddle
- Detecting stampedes and designing TTL for productionmiddle
- Metastable failure, fencing tokens, and production postmortemssenior
- What a relation is: tables, rows, keys, and constraintsjunior
- Constraints, keys, and Postgres data typesmiddle
- Normal forms, denormalization, and why schemas stickmiddle
- JSONB, arrays, and when a side table winsmiddle
- Heap storage, TOAST, and column alignmentsenior
- Schema integrity: deferral, versioning, and production failure modessenior
- Relational vs document, wide-column, graph, and key-valuesenior
- Index-only scans, the Visibility Map, and INCLUDEsenior
- Production failure modes and the index audit playbooksenior
- pg_statistic, ANALYZE, and production observabilitymiddle
- Production failure modes and plan stabilitysenior
- MVCC: why readers and writers never wait for each otherjunior
- Row versions and snapshots: the on-disk mechanicsmiddle
- HOT updates and isolation levels: what you gain and what you paymiddle
- Vacuum and bloat: keeping the storage tax boundedmiddle
- CLOG, XID wraparound, and MultiXact: deep visibility internalssenior
- SSI internals and production autovacuum tuningsenior
- Real-world MVCC failures, deployment patterns, and distributed snapshotssenior
- Connection pools: amortising the cost of a Postgres backendjunior
- PgBouncer session, transaction, and statement modesmiddle
- Pool sizing: the (cores × 2) + spindles formula and the two-layer stackmiddle
- Pool exhaustion and idle-in-transaction: the 3 AM failure modemiddle
- Migrating to transaction mode: rollout playbook and PgBouncer 1.21 prepared statementsmiddle
- The Postgres process model and why raising max_connections degrades throughputsenior
- Pooler landscape 2026, serverless connection storms, and the full failure-mode taxonomysenior
- What a schema migration is and why it replaces ad-hoc DDLjunior
- ADD COLUMN: instant in PG 11+ vs rewrite in older Postgresjunior
- The lock-queue failure mode: why instant DDL can freeze the databasemiddle
- Safe DDL patterns: NOT VALID, CONCURRENTLY, and unsafe-op fixesmiddle
- Expand-contract: zero-downtime for breaking schema changesmiddle
- Advisory locks, migration tools, and deploy coordinationsenior
- Migration failure taxonomy and production disciplinesenior
- Why sharding exists: the single-Postgres ceilingjunior
- Shard-key selection: hash, range, list, and directory strategiesmiddle
- Partitioning vs sharding: same word, two different thingsmiddle
- Co-location and Citus: the invariant that makes sharding usablemiddle
- The hot-shard failure mode: detection, isolation, and durable policymiddle
- Schema-based sharding and multi-tenancy alternativessenior
- Online resharding, 2PC, and the operational cost of shardingsenior
- The seven acts: from CREATE TABLE to Citusjunior
- Acts 1–3 in depth: schema, indexes, and planner statisticsmiddle
- Acts 4–6 in depth: MVCC bloat, connection pooling, and safe migrationsmiddle
- Act 7 in depth: sharding, co-location, and the seven-tier tradeoff cascademiddle
- Observability, anti-patterns, and production triagesenior
- Raft roles, terms, and why majority quorums prevent split brainjunior
- How Raft replicates a log entry and decides it is safe to commitmiddle
- Raft leader election: timeouts, voting rules, and the four safety propertiesmiddle
- Raft in the real world: partitions, slow disks, and client routingmiddle
- Raft extensions: pre-vote, learners, snapshots, and linearizable readssenior
- Raft in production: membership changes, Multi-Raft, and observabilitysenior
- Where data fetching happens — and why it decides LCPjunior
- Fetch waterfalls — diagnosis and the Promise.all curemiddle
- React Server Components and Suspense streamingmiddle
- Client-side cache: TanStack Query, SWR, and stale-while-revalidatemiddle
- LCP, prefetch, and race conditions in interactive fetchingmiddle
- Senior internals: RSC payload, caching layers, and production failure modessenior
- The three-way handshakejunior
- Sequence numbers and connection statemiddle
- DNS: what it does and why it existsjunior
- The resolver walk: referrals, record types, and gluemiddle
- TTL, caching, and DNS propagationmiddle
- The 1-RTT handshake: key shares and ECDHEmiddle
- Session resumption and 0-RTTmiddle
- WebSocket: the HTTP upgrade handshakejunior
- WebSocket frame format: opcodes, masking, fragmentationmiddle
- WebSocket backpressure: when clients can''''t keep upmiddle
- Reconnection: jittered backoff, thundering herd, message resumptionsenior
- WebSocket at scale: HTTP/2 multiplexing, permessage-deflate, C10Msenior
- WebSocket in production: proxies, security, and distributed architecturesenior
- What reverse proxies dojunior
- Health checks, connection draining, and slow startmiddle
- Session affinity, consistent hashing, and the right fixmiddle
- Retry storms, circuit breakers, and load sheddingsenior
- Resilient LB architecture: anycast, zone-aware routing, and observabilitysenior
- Why QUIC and not TCP+TLSjunior
- Connection IDs and network migrationmiddle
- 0-RTT resumption and packet encryptionsenior
- DDoS: what it is and why it worksjunior
- Amplification attacks and state exhaustionmiddle
- Rate limiting: algorithms and architecturemiddle
- WAFs, firewalls, mTLS, and HSTSmiddle
- DNS cache poisoning and BGP hijackingsenior
- Defense-in-depth architecture and attack economicssenior
- DNS, TCP, TLS in sequence: where the milliseconds gomiddle
- Proxy intercepts and security gates: rate limiters, WAF, mTLSmiddle
- Alternate paths: QUIC 0-RTT, WebSocket upgrade, connection migrationmiddle
- Observability: distributed traces, USE/RED, and samplingsenior
- Resilience: cascading retries, circuit breakers, and error budgetssenior
- What the three signals are: logs, metrics, and tracesjunior
- Why structured logs exist: the diary vs the spreadsheetjunior
- The production log schema: fields every line must carrymiddle
- PII redaction and log injectionsenior
- OTel Logs Data Model and audit logs as a subsystemsenior
- SLI, SLO, and the error budget: reliability by the numbersjunior
- Error budget policy, latency SLOs, and composite journeysmiddle
- Production SLO failures, self-observability, security, and the big picturesenior
- The incident loop: from pager to postmortem to preventionmiddle
- Cache lines, struct layout, and false sharingmiddle
- SIMD, SoA vs AoS, and memory bandwidthmiddle
- Cache-oblivious algorithms, PGO, and production failuressenior
- GC in production: observability, security, edge cases, and fleet governancesenior
- Batching: amortize fixed cost per operationjunior
- The batching window: size and wait timemiddle
- Batching in Kafka and Postgresmiddle
- io_uring and observability of batchingmiddle
- From Nagle to io_uring: evolution of batchingmiddle
- Backpressure, failure isolation, and batch security in productionsenior
- CI enforcement and RUM: making budgets stickmiddle
- V8 JIT pipeline, HTTP priorities, and bundle securitysenior
- The performance loop: discipline, not a projectjunior
- Classify and fix: matching bottleneck families to remediesmiddle
- Observability stack and CI gates: catching regressions before they shipmiddle
- Incident to enforcement: SLO burn to verified fix in 35 minutesmiddle
- Culture, economics, and org-scale performancesenior
- At-most-once, at-least-once, exactly-once: the three delivery contractsjunior
- The three failure legs — where duplicates and losses actually happenmiddle
- Consumer-side dedup: the cheapest path to exactly-once processingmiddle
- Kafka exactly-once semantics: idempotent producer and transactionsmiddle
- SQS visibility timeout, DLQ, and the outbox patternmiddle
- Exactly-once in production: impossibility proof, hybrid patterns, and real incidentssenior
- What OAuth is and why passwords are not the answerjunior
- Authorization code flow with PKCEmiddle
- ID token validation and JWKS cache managementmiddle
- Refresh token rotation and scope-based least privilegemiddle
- Sender-constrained tokens: DPoP and mTLSsenior
- OAuth in production: audience attacks, observability, and real failuressenior
Something unclear?
Ask a question about this lesson. Questions are anonymous and go straight to the author to make the lesson better.