Minor suggestion - consider adding or optionally adding a delay before the DENYSOFT is sent when connections are being tempfailed on connect e.g.

`````Javascript
setTimeout(function () {
    return next(DENYSOFT, too_many);
}, 30 * 1000);
`````

Based on a lot of testing I did some time ago - this prevents 'woodpeckering' where tempfailed connections cause remote systems to disconnect/reconnect thereby causing additional load instead of reducing load like we desire here.