Birbla

Join the discussion

Write your take first — we'll ask for email only when you're ready to publish.

Sign in
  • Hacker News
  • I was very taken by the other recent zeroserve headline that showed up, zeroserve: a zero-config web server you can script with eBPF:

    > The twist is that you can drop eBPF programs into the tarball and they run on every request, in userspace, as sandboxed middleware - rewriting, authenticating, and rate-limiting requests, or reverse-proxying them to a backend when you want it to act as a gateway in front of your app.

    https://su3.io/posts/introducing-zeroserve https://news.ycombinator.com/item?id=48425723 (272 points, 9d ago, 66 comments)

    It's such opposite audiences being targeted here. eBPF is for super nerds, Caddy for "i just want a just works http server". The headline here doesn't do much for me: I don't care about Caddy compatibility and 3x doesn't mean much to me (Caddy feels like it targets friendly and easy not performance). But eBPF scripting? Ok that's cool, that's rad.

    by jauntywundrkind
  • I am surprised how well nginx holds up?!
    by augunrik
  • Can someome enlighten me: What's the point of “running eBPF scripts in userspace”? Isn't being run in kernel space the whole point of eBPF in the first place?
    by stymaar
  • Interesting. Trying to get some of the performance advantages of TUX/IIS without as much insecurity makes sense for some big players, I guess.

    The usual 3400 lines lock file and AGENTS.md raise some questions about the aforementioned security, though.

    by BoingBoomTschak
  • From a technical standpoint, these are always impressive projects, but I've always wondered: has anyone ever encountered a use case where the Caddy was the bottleneck?
    by zsoltkacsandi
  • No ACME! That is a dealbreaker

    https://github.com/losfair/zeroserve/blob/main/CADDY_COMPAT....

    by tln
  • Anyone else got a really weird Chorme pop-up asking which cert to use for su3.io:443?

    Very bizarre, never seen that before.

    Thumbprints:

      - 60949a09aab8677f87a0b9eda7099a03ca510fb3
  - 1b146798f0dc93773247e86312f1b730c4eeebb3
    by 1a527dd5
  • "Caddy compatible" minus everything that matters, like ACME and plugins. And NGINX still steals the show. Not everything needs to be rewritten.
    by codingjoe

Explore Birbla archives