Top all-time · #16797
Tempesta Technologies
Company blog · tempesta-tech.com/blogsystemssecurity
Tempesta Technologies is the company blog at tempesta-tech.com, writing about systems and security. Since 2019, 4 different Hacker News readers have linked it 21 times. No feed was found, so read it on the site itself.
High-performance, secure web content delivery and edge computing. Fully in-house managed solutions for CDNs. No vendor locks or third party dependencies
What Hacker News says?
The benchmarks https://github.com/ncm/computed-goto/blob/master/benchmarks/... benchmark is not applicable to this discussion because it compares _too_ small state machines. I reference my talk and presentation once more: http://www.tempesta-tech.com/research/http_str.pdf - slide 23 discusses that the goto FSM makes sense for _hundreds_ of states.
Comment linking /research/http_str.pdf
on “C/C++ vs. Rust Performance”Submitted C/C++ vs. Rust Performance as a story · 102 points
HN discussion> I'm unable to find measurements. I mean, the amount of code duplication is not an optimization parameter, the amount of Mb/s of HTTP parsed is. The measurements are covered in slides 23-24 in http://www.tempesta-tech.com/research/http_str.pdf > goto jumping between branches is a bad thing from the point of view of maintainability. In our parser we have DSL for the state machine, so we encode which state the machin…
Comment linking /research/http_str.pdf
on “C/C++ vs. Rust Performance”Submitted A Review of the recent Google paper about a user-space networking project Snap as a story · 6 points
HN discussionThank you, I'm glad that you enjoyed the article! Regarding computed and simple goto I'd like to reference our early article discussing the parser in standard goto https://natsys-lab.blogspot.com/2014/11/the-fast-finite-stat... . My recent talk at scale https://www.socallinuxexpo.org/scale/17x/presentations/fast-... (watch video https://www.youtube.com/watch?v=LQc4er8ng64&feature=youtu.be... and slides at http://www…
Comment linking /research/http_str.pdf
on “C/C++ vs. Rust Performance”Submitted Fast programming languages: C, C++, Rust, and Assembly as a story · 3 points
HN discussionThere were quite a long work, for couple of years, on the parser. The first article about the parser is https://natsys-lab.blogspot.com/2014/11/the-fast-finite-stat... and next I updated it significantly in my talk at https://natsys-lab.blogspot.com/2014/11/the-fast-finite-stat... ( http://www.tempesta-tech.com/research/http_str.pdf and https://www.youtube.com/watch?v=LQc4er8ng64&feature=youtu.be... ). The talk also…
Comment linking /research/http_str.pdf
on “C/C++ vs. Rust Performance”Submitted User-space vs. Linux kernel TCP for HTTPS proxying as a story · 3 points
HN discussionHi, thank you for the reply! You can read about JA5 at https://tempesta-tech.com/knowledge-base/Traffic-Filtering-b... . But the thing is that the hashes were just inspired by the work of John Althouse and there is no any relation. Unfortunately, we didn't realize what "JA" stands for at the time we were designing the feature. We will rename it https://github.com/tempesta-tech/tempesta/issues/2533 . Sorry for the co…
Comment linking /knowledge-base/Traffic-Filtering-by-Fingerprints/
on “Show HN: An open source access logs analytics script to block bot attacks”Submitted Web application firewall (WAF) acceleration as a story · 3 points
HN discussionHi HN, DDoS attacks are becomeing larger and cheaper to launch, so we work on a scalable open source solution to mitigate them. Tempesta xFW's core is XDP and TC eBPF programs implementing volumetric DDoS filtering. A user-space daemon handles gRPC requests from CLI tool or WebAPI (via C library). It supports two packet-path architectures: * host-based protection, such as CDN edge or on-premises application delivery…
Comment linking /tempesta-escudo/knowledge-base/Performance/
on “Show HN: Open-Source eBPF Volumetric DDoS Protection”Submitted The new HTTP/2 vulnerability: 'Made You Reset' CVE-2025-8671 as a story · 2 points
HN discussionHi HN, DDoS attacks are becomeing larger and cheaper to launch, so we work on a scalable open source solution to mitigate them. Tempesta xFW's core is XDP and TC eBPF programs implementing volumetric DDoS filtering. A user-space daemon handles gRPC requests from CLI tool or WebAPI (via C library). It supports two packet-path architectures: * host-based protection, such as CDN edge or on-premises application delivery…
Comment linking /tempesta-escudo/knowledge-base/Performance/
on “Open-source XDP/TC DDoS filtering for 100G+ Linux networks”Submitted Building your own WordPress staging with Tempesta FW as a story · 2 points
HN discussionSubmitted User Space TCP? (2020) as a story · 2 points
HN discussionSubmitted Understanding Nginx Tail Latencies as a story · 2 points
HN discussionSubmitted Using ClickHouse for L7 DDoS and Bot Traffic Analytics with Tempesta FW as a story · 1 points
HN discussionSubmitted Memory Safety and Network Security as a story · 1 points
HN discussionSubmitted CPDoS: Cache Poisoned Denial of Service as a story · 1 points
HN discussion