I just merged SSL support into Redis unstable. This feature has an interesting story that I want to tell you. It was kinda of a "process" to reach the right solution, or at least a solution that looks a lot better than the alternatives.
Privsep is usually done without syscalls, e.g. with a shm ring buffer or similar, but it might be a lot of memory moves without a lot of clever zero copy pointer tricks!
-
-
Unless Redis has gotten a lot faster than I remember, I can't imagine a single memcpy mattering -- just how many 100Gbps links do you need to saturate?
-
For those interested, the analysis we did was documented on these two other PRs: https://github.com/antirez/redis/pull/5778 … https://github.com/antirez/redis/pull/4855 … Domain sockets were too slow, and anything more complex than that we figured would be harder to understand than the PR that was accepted.
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.