unofficial mirror of meta@public-inbox.org
 help / color / mirror / Atom feed
* nntp://news.public-inbox.org/ may be unstable
@ 2019-06-21 17:21 Eric Wong
  2019-06-24 19:03 ` TLS on news.public-inbox.org [was: may be unstable] Eric Wong
  0 siblings, 1 reply; 2+ messages in thread
From: Eric Wong @ 2019-06-21 17:21 UTC (permalink / raw)
  To: meta, git

Hopefully I didn't break anything, stress testing some stuff
and my own Internet connection is intermittent :<

^ permalink raw reply	[flat|nested] 2+ messages in thread

* TLS on news.public-inbox.org [was: may be unstable]
  2019-06-21 17:21 nntp://news.public-inbox.org/ may be unstable Eric Wong
@ 2019-06-24 19:03 ` Eric Wong
  0 siblings, 0 replies; 2+ messages in thread
From: Eric Wong @ 2019-06-24 19:03 UTC (permalink / raw)
  To: meta, git

Eric Wong <e@80x24.org> wrote:
> Hopefully I didn't break anything, stress testing some stuff
> and my own Internet connection is intermittent :<

STARTTLS is now available on port 119, and NNTPS on 563.
I think it works... :x

No idea if it's actually secure or not; but it might help
get around firewalls or traffic filtering.

I'm using Let's Encrypt and IO::Socket::SSL defaults for
SSL_server=1.  This is with the libiosocket-ssl-ssl-perl 2.044-1
package in Debian stable (9.x),

Anyways there's a boatload of changes and size reductions aimed
at C10K+ parallelism starting at:
https://public-inbox.org/meta/20190624025258.25592-1-e@80x24.org/
But OpenSSL/IO::Socket::SSL overhead remains disappointing,
even with SSL_MODE_RELEASE_BUFFERS :<

HTTPS work hasn't started, yet (but I figure most folks are
using nginx + varnish); and there's other bugs and stuff
I'd need to look at...

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2019-06-24 19:03 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2019-06-21 17:21 nntp://news.public-inbox.org/ may be unstable Eric Wong
2019-06-24 19:03 ` TLS on news.public-inbox.org [was: may be unstable] Eric Wong

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).