Conversation

nginx 😱 seriously ffs if you want to write C, stop making these bloated NIH'd libc replacement frameworks that get everything wrong (unsafely wrong even)

Quote Tweet

Daniel Micay

@DanielMicay

Sep 7, 2021

Replying to @DanielMicay @saleemrash1d and 3 others

I think they got tired of people still using LAMP and decided outdo Apache by turning nginx into an in-process library/framework for a bunch of different languages. Basically the unikernel thing but with web servers. They just need to make it an OS now for maximum hype.

Replying to

They want performance at all costs and apparently that includes avoiding anything from libc and making a whole bunch of hand-rolled sketchy performance-oriented code full of free lists, arenas, lock-free data structures, custom threading, etc. Lots wrong from glancing over it.

Replying to

and

File some bugs?

Replying to

and

I don't generally file bugs in software that I don't use. Have no plans to use NGINX Unit and ideally in the long term there will be something better than nginx. nginx itself is pretty stagnant even though there's a lot to improve when it comes to latency and safety/security.

7:37 AM · Sep 7, 2021Twitter Web App

Replying to

and

Are there any companies that use NGINX and have a bug bounty program? Because NGINX is practically *the* static file server nowadays, and is used as a reverse proxy by Cloudflare too.

Replying to

and

nginx itself is a lot more mature and far less ambitious than the newer NGINX Unit. It still has a similar approach to rolling everything themselves but they aren't trying to provide nearly as much functionality in their traditional / legacy web server vs. the new web/app server.

Show replies