My primary L7 balancer migration went successfully it appears :) Boy that was a whole day's work.
- removed an L3 bottleneck (reduced rtl by 5ms, this is YUGE)
- correct and working response caching
- fine tuned http caching
- response compression always allowed
- more bot blocking (and more fine grained blocking, for better SEO)
- more strict and aggressive rate limiting, that works correctly and uniformly across all sites
- uniform and working upstream protections
- uniform and aggressive TLS defaults
- clean snippets, clean configs, clean all around
- mapped in faster storage for response caches
Next job is to get vnlib zstd compression integrated :)