A nixamp server accepted every TCP connection and answered none of them. Looked exactly like a firewall. It was one spawnSync per file holding the event loop while the kernel completed handshakes from the accept backlog.
The probe that ruled out the network, and the fix:
