spliffedr

5 ms·

1.
by spliffedr 3mo ago
Take a look at https://github.com/concurrencykit/ck and https://github.com/microsoft/mimalloc , it will fit well for a zero-copy and mem aligned reverse proxy. Also, if you want to add a DDoS prote
2.
by spliffedr 6mo ago
I kinda built(vibe-coded) the same thing[1] but decided to go full C instead of rust. [1] https://github.com/NoFear0411/spliff
3.
by spliffedr 7mo ago
CodecProbe asks your device what it can play — then checks if that's true. Browsers expose three separate APIs for codec support, and they return different answers for the same codec on the same device. One says yes, another says no, a
4.
Show HN: CodecProbe – What your device says it can play vs. what it can(codecprobe.dev)
1 points by spliffedr 7mo ago|1 comments
5.
by spliffedr 8mo ago
It is nice to see people thinking and working on low level networking stuff that everyone will benefit. I think even single node clusters/container hosts will benefit a lot from XDP loophole. I'll keep an eye on it.
6.
by spliffedr 8mo ago
Give it a test and let me know if you encounter any issues. Except the chrome/chromium with static binaries, that have BoringSSL shipped inside. The entire SSL/TLS code flow is a motherfucking spaghetti to provide acceleration and
7.
by spliffedr 8mo ago
That is a rabbit hole that I don't wanna go down to again.
8.
by spliffedr 8mo ago
I think (not 100% sure) Cillium [0][1] kinda already does this. This loophole is good for packet processing/routing and even introducing XDP based ACL to bypass any ip/nf tables and get that almost wire speed benefit. I use Cilium
9.
by spliffedr 8mo ago
I've updated the Architecture diagrams to include everything: https://github.com/NoFear0411/spliff/blob/main/README.md#arc... Thanks for the format tip.
10.
by spliffedr 8mo ago
Here are answers to both your questions: The code has the infrastructure for XDP hardware offload: - XDP_MODE_OFFLOAD enum exists in bpf_loader.h:61 - XDP_FLAGS_HW_MODE flag mapping in bpf_loader.c:789 But it's not usable in practice b
11.
by spliffedr 8mo ago
Hi HN, I *built Spliff, a high-performance L7 sniffing and correlation engine in pure C23. The goal is to build a fully working, Linux-native EDR that isn't a resource-hogging black box. The core innovation – "Golden Thread"
12.
Show HN: Spliff – Correlating XDP and TLS via eBPF (Building a Linux EDR)(github.com)
5 points by spliffedr 8mo ago|14 comments