Have you ever read Peter G. Neumann's final report on the DARPA CHATS research program ?
If you are in the business of building "trustworthy systems", you should have, otherwise do it now.
Peter's thinking was a huge influence on @vinyl_cache, both in terms of architecture and project goals, so "Thanks Peter!":
"So please, grab a mug, a handful of crackers and a comfy chair" says @bsdphk
🍵
https://code.vinyl-cache.org/vinyl-cache/vinyl-cache/commit/c3ced3d56b01848191f87016ddf3d8f1cef22021
👩🏻💻 my so-called sudo life - day 497: Mastodon stampede edition 🐘
Dear Fedi friends,
You may remember how last year I was dealing with self-DDoS attacks every time I shared a link to my Wordpress or Ghost sites. Well, I solved the issue with Ghost (#VinylCache is brilliant) but I never found a solution for my Wordpress site... not even with #BunnyCDN. I guess I wasn't tweaking the right settings.
This is a pity because TBH the ActivityPub for Wordpress plugin is SO COOL and works flawlessly. I had to move my blog posts to Ghost and keep Wordpress as a static portfolio site. That being said, I never dared share links to my Wordpress site anymore because I would get about 4000 requests within 60 seconds and everything would freeze.
I just looked into #BunnyCDN's settings again and tried to tweak them. So please bear with me for an experiment, sharing an old blog post and seeing what happens.
Wish me luck!
From the archives:
https://elenarossini.com/2025/01/my-so-called-sudo-life-time-matters/
#BuyEuropean #CDN #DDOS #MastodonHugofDeath #MastodonStampede #Wordpress #blog #MySoCalledSudoLife
@borup https://gitlab.com/uplex/varnish/libvmod-blobdigest/-/blob/master/src/vmod_blobdigest.vcc?ref_type=heads has hmac sha512 and https://gitlab.com/uplex/varnish/libvmod-crypto/-/blob/master/src/vmod_crypto.rst?ref_type=heads has the rsa verifier.
both got vinylized and should work with #vinylcache. if not, please share the issue you are experiencing.
note that both only do the crypto part on blobs. to convert to/from encodings like base64 or hex, we have the bundled blob vmod.
I'm having very little luck navigating the documentation for Vinyl Cache.
I would like something like Fastlys diges.rsa_verify() and digest.hmac_sha512_base64().
But when reading the VMOD list it seems the UPLEX modules (which might match) do not work with the latest Vinyl Cache.
I agree.
Until it croaked, we had a BeagleBoneBlack in the CI cluster of #VinylCache (The FOSS project formerly known as Varnish Cache)
New tutorial: Configuring TLS with haproxy
We show a low-maintenance, “configure and forget” solution for using TLS for client- and backend traffic with Vinyl Cache and haproxy.
My very rough test shows that Rust hyper can achieve ~119k requests per second, but vinyl cache formerly known as Varnish with 1s cache on front of a same URL can reach 96k requests per second.
https://github.com/Ciantic/stress-test-vinyl-cache/tree/main
WikiApiary is back online after having been down and overloaded for a long time.
Bawolff brought it back and did a ton of full stack performance work to optimise the whole system. Adding HTTP caching, tuning InnoDB, and more!
https://blog.bawolff.net/2026/03/giving-wikiapiary-kick.html
#MediaWiki #WikiApiary #Wikibase #Wikidata #VinylCache #VarnishCache #MariaDB #MySQL #webperf #SRE
Hmmm,
My impression was that #Varnish Software would be based off on the #VinylCache upstream.
But now it seems like they have effectively created a new "varnish" repository where they intend to follow upstream, with their own patches *and* features vinyl doesn't want?
I already see changed not upstreamed, and they seem to be pushing for existing varnish packages to point to the "new" upstream?
Poul-Henning Kamp
Brett Sheffield (he/him)
Elena Rossini on GoToSocial ⁂
Nils Goroll 🕊️
GPN
Borup
Poul-Henning Kamp
The Vinyl Cache Project
Jari Pennanen
Timo Tijhof
Morten Linderud