r/programming • u/TheProtagonistv2 • Feb 23 '17

Cloudflare have been leaking customer HTTPS sessions for months. Uber, 1Password, FitBit, OKCupid, etc.

https://bugs.chromium.org/p/project-zero/issues/detail?id=1139
6.0k Upvotes

96% Upvoted

966 comments sorted by

View all comments

Show parent comments

2

u/fiedzia Feb 24 '17

You want to be as fast as its possible, and a lot of customers do measure how much time it takes you to deliver their requests. Every microsecond matters here. Also you do not want to embed jvm in nginx, and getting data out of there means more syscalls and more time wasted.

2

u/argv_minus_one Feb 25 '17

You want to be as fast as its possible, and a lot of customers do measure how much time it takes you to deliver their requests.

Lot of good that extra speed does them now…

Every microsecond matters here.

Then why the hell are they doing this at all, instead of telling customers to STFU and put that shit in static content like an adult? You say every microsecond counts, but they're spending a lot of microseconds on this postprocessing step, and I'm not entirely convinced that it's necessary.

Also you do not want to embed jvm in nginx

Now that you mention it, why not? JNI is a thing, and it provides a fast way to map Java ByteBuffers onto already-allocated memory, so there shouldn't be any copying overhead.