My primary L7 balancer migration went successfully it appears :) Boy that was a whole day's work.

- removed an L3 bottleneck (reduced rtl by 5ms, this is YUGE)

- correct and working response caching

- fine tuned http caching

- response compression always allowed

- more bot blocking (and more fine grained blocking, for better SEO)

- more strict and aggressive rate limiting, that works correctly and uniformly across all sites

- uniform and working upstream protections

- uniform and aggressive TLS defaults

- clean snippets, clean configs, clean all around

- mapped in faster storage for response caches

Next job is to get vnlib zstd compression integrated :)

Reply to this note

Please Login to reply.

Discussion

You lost me at "My primary", but I'm happy for you, or my sincere condolences. 😜

I think there was something in there about a server. Maybe.

XD thanks. Running public services (even for nobody) can be a lot of work sometimes.

Oh, are those our servers?

Mine, but ill be bringing some of this new config to us as well :)