A toy HTTP server in development Goals: secure, scalable (vertically and horizontally), not excessively slow, separation of privilege (and knowledge: HTTP code doesn't have to know TLS key) ...
Ariadne Devos
2bee9d4835
Merge branch 'ip' into odd-fixes
|
преди 5 години | |
|---|---|---|
| arch | преди 5 години | |
| buffer | преди 5 години | |
| collateral | преди 5 години | |
| doc | преди 5 години | |
| fd | преди 5 години | |
| generic | преди 5 години | |
| http | преди 5 години | |
| lex | преди 5 години | |
| sHT | преди 5 години | |
| stuff | преди 5 години | |
| task | преди 5 години | |
| tests | преди 5 години | |
| tools | преди 5 години | |
| worker | преди 5 години | |
| .gitignore | преди 5 години | |
| CFLAGS | преди 5 години | |
| COPYING | преди 6 години | |
| Makefile.am | преди 5 години | |
| README | преди 5 години | |
| configure.ac | преди 5 години | |
| control.h | преди 5 години | |
| fd.h | преди 5 години | |
| worker.h | преди 5 години |
README
.. SPDX-License-Identifier: GPL-3.0-or-later
.. Copyright © 2018-2019 Ariadne Devos
# s^2 Web Stuff
s^2 is -- so far -- a personal project to write secure and sandboxed software
for doing things on the web. E.g. a web server and mail server and client.
In contrast to seemingly wide-held opinion, except perhaps by Intel,
it doesn't view speculative execution as an evil (*).
(*)
Except Meltdown and perhaps some others ... The model of Spectre I
address is: all branches may temporarily be ignored or falsily taken and all
indirect branch must be retpolined. Checking the page bits may be speculated.
s^2 should be safe against Speculative Store Bypass, Bounds Check Bypass,
Branch Target Injection. Foreshadow is not relevant. Lazy FP State Restore
is a bug of the kernel.
As an extension to what nginx supports, s^2 will allow migration to
different versions and machines. The source code is intended to be readable.
There is some architecture-specific code for Spectre mitigation.
Linux is supported, and the BSDs will be. W32 might be possible.
Do `autoreconf` && `./configure` && `make` to compile.
A CFLAGS argument of "$(sed '/^[*/#]/d' CFLAGS |tr '\n' ' ')"
is recommended, although compiler support may vary.
## Stuff
- [ ] apps/website.md: for static web sites, may be extended
- [ ] apps/torrent.md (TODO: bittorrent, webtorrent, Dat, IPFS, gnunet?)
- [ ] apps/mail.md: e-mail client and server, encrypted, signed, image support)
- [ ] apps/blog.md (TODO)
- [ ] apps/git.md (TODO)
- [ ] apps/ci.md (TODO)
## Some design details
OO is used, except that inheritance isn't really used. Nothing is overridden.
Generics may be used sparely. SMP may be used for efficiency (power-efficiency
according to Intel?), but is not mandatory. Tasks of the same type are batched
to reduce cache pressure and branch misprediction.
## Contact
Do NOT send a mail to Ariadne Devos , as I can't login anymore.
Instead, open a bug at . Patches, ideas and
general discussion are welcome.
## Legal stuff
The license text is in `COPYING` (the GNU General Public License,
version 3 or later (at your choice). See `doc/license-copyright.rst`
for more information on copyright and licensing.
.. Copyright © 2018-2019 Ariadne Devos
# s^2 Web Stuff
s^2 is -- so far -- a personal project to write secure and sandboxed software
for doing things on the web. E.g. a web server and mail server and client.
In contrast to seemingly wide-held opinion, except perhaps by Intel,
it doesn't view speculative execution as an evil (*).
(*)
Except Meltdown and perhaps some others ... The model of Spectre I
address is: all branches may temporarily be ignored or falsily taken and all
indirect branch must be retpolined. Checking the page bits may be speculated.
s^2 should be safe against Speculative Store Bypass, Bounds Check Bypass,
Branch Target Injection. Foreshadow is not relevant. Lazy FP State Restore
is a bug of the kernel.
As an extension to what nginx supports, s^2 will allow migration to
different versions and machines. The source code is intended to be readable.
There is some architecture-specific code for Spectre mitigation.
Linux is supported, and the BSDs will be. W32 might be possible.
Do `autoreconf` && `./configure` && `make` to compile.
A CFLAGS argument of "$(sed '/^[*/#]/d' CFLAGS |tr '\n' ' ')"
is recommended, although compiler support may vary.
## Stuff
- [ ] apps/website.md: for static web sites, may be extended
- [ ] apps/torrent.md (TODO: bittorrent, webtorrent, Dat, IPFS, gnunet?)
- [ ] apps/mail.md: e-mail client and server, encrypted, signed, image support)
- [ ] apps/blog.md (TODO)
- [ ] apps/git.md (TODO)
- [ ] apps/ci.md (TODO)
## Some design details
OO is used, except that inheritance isn't really used. Nothing is overridden.
Generics may be used sparely. SMP may be used for efficiency (power-efficiency
according to Intel?), but is not mandatory. Tasks of the same type are batched
to reduce cache pressure and branch misprediction.
## Contact
Do NOT send a mail to Ariadne Devos , as I can't login anymore.
Instead, open a bug at . Patches, ideas and
general discussion are welcome.
## Legal stuff
The license text is in `COPYING` (the GNU General Public License,
version 3 or later (at your choice). See `doc/license-copyright.rst`
for more information on copyright and licensing.