In Linux, when the UDF container process exceeds the allocated memory, the Linux Out-of- Memory (OOM) killer terminates the UDF container. When the UDF container is terminated, all current and future UDFs will fail until the database is restarted.

Docker can be used to automatically restart the container if the Linux OOM killer terminates the container to prevent UDFs from becoming unavailable. The number of restarts can be unlimited or can be limited to a specific number of restarts.