I'm thrilled to announce the first release of Quark, my new reverse proxy written in #Rust 🦀
Quark v0.1.0 is out and fully functional, built on top of the robust #Hyper and #Rustls libraries. It's designed to offer high performance and security for your web applications.
Quark is open source and available under the MIT license.
How does 0-RTT work in #iroh (and #QUIC, and a little bit of #TLS), a fun exploration: https://www.iroh.computer/blog/0rtt-api
What's even better is that @Frando already landed a PR in #rustls to improve the UX of this (https://github.com/rustls/rustls/pull/2476). Should also land in #Quinn and #iroh soon!
🌘 Rustls 伺服器端效能
➤ 提升網路安全與效能：Rustls 的最新進展
✤ https://www.memorysafety.org/blog/rustls-server-perf/
本文探討了 Rustls 專案在伺服器端效能上的最新進展，重點在於提升 TLS (Transport Layer Security) 的效能而不犧牲安全性。研究人員透過測試發現，Rustls 在覈心數增加的情況下，效能幾乎呈線性擴展，且伺服器延遲時間低於 OpenSSL 兩倍。文章詳細闡述了狀態式與無狀態的連線重用機制，並說明瞭 Rustls 如何優化金鑰輪換和減少傳輸的票證數量，以提升效能和安全性。
+ 聽起來 Rustls 是一個很有潛力的 TLS 實作，尤其是在記憶體安全方面。如果能取代 OpenSSL，網路世界會更安全。
+ 這篇文章清楚地解釋了 Rustls 如何在效能上超越 OpenSSL，對網路安全工程師來說非常有參考價值。
#網路安全 #Rustls #TLS #效能優化
Rustls: where #nerds desperately try to make #TLS exciting again 🎉. Apparently, the Internet Security Research Group showered them with cash to make things faster, but they'll still take a year to tell us they're "back" with more #improvements. 🐢💸 Who knew #performance could be this riveting?
https://www.memorysafety.org/blog/rustls-server-perf/ #Rustls #InternetSecurity #HackerNews #ngated
Rustls Server-Side Performance
https://www.memorysafety.org/blog/rustls-server-perf/
#HackerNews #Rustls #Server-Side #Performance #Rust #Programming #Performance #Optimization #Memory #Safety
#curl 8.13.0 is here — and it broke records! - 300+ bugfixes - 501 commits - New features like --url from file, TLS 1.3 early data, base64 decoding, & more across wolfSSL, #rustls, #OpenSSL & #gnutls! Watch the release stream: youtu.be/Jor0z31fyNw... @bagder.mastodon.social.ap.brid.gy
Has anyone written a library for configuring #rustls from a configuration file?
TLS settings need to be configured by the server administrator, not hard-coded, and it seems silly for every application to have its own bespoke way of translating a configuration file into a rustls ServerConfig.
#rustls 0.23.21 has been released (#Rust / #SSL / #TLS) https://github.com/rustls/rustls
#rustls 0.23.18 has been released (#Rust / #SSL / #TLS) https://github.com/rustls/rustls
Rust-Written #Rustls Now Reportedly Outperforming #OpenSSL & #BoringSSL
Check out Rustls outperforming OpenSSL and BoringSSL in benchmark tests, promising more secure and high-performance TLS - get ready to level up your secure coding game! #Rustls #Security #Performance https://www.memorysafety.org/blog/rustls-performance-outperforms/
Got my first HTTPS response from #haproxy using #rustls openssl-compat. I won't say this working corrrectly yet, and I had to patch a few things in haproxy but at least this is a start. Don't expect an official support, I'm just doing this for experimenting :-) https://github.com/wlallemand/haproxy/blob/20240525-rustls-libssl/RUSTLS_LIBSSL.NOTES
@sindarina Sadly a lot of users I know simply can't and won't since unlike the #certfied and #supported #OpenSSL provided by their #distro as per maintenance contract, #Rustls isn't #PCIDSS-compliant or otherwise certified for their use-cases...
Otherwise most would've already used #LibreSSL if not @mozilla 's #NSS instead.
Gotta hand it to #Rustls it comes with a very straightforward configuration opposed to BoringSSL, which needs fee config options to get H2 and ALPN to run.
Gotta thank Cloudflare and Pingora for their code and examples.
fee inner workings optimized and new 0.2.3 version released and this server updated to use it.
Time to sleep.
#rust
The nym mixnode anonymity router now builds on OpenBSD! It's not using LibreSSL but rustls. Anyone here maybe had a look at rustls or have an opinion about it? Background: https://github.com/nymtech/nym/issues/4284
If you have been waiting for part 2 of the blog series about the performance work we have been doing on #rustls for Prossimo ISRG, your wait is over!
