8 ms·
I guess that signals it's time for nginx users to check out possible alternatives - just in case, if things turn out for the worse. I can recommend having a lo
by c0l0 8y ago
I guess that signals it's time for nginx users to check out possible alternatives - just in case, if things turn out for the worse.
I can recommend having a look at https://varnish-cache.org/ https://varnish-cache.org/ - while its performance might not be 100% up to par with nginx in some (very, very high-end) scenarios, it has many other fortes that nginx (at least in its FOSS release version; I've never used nginx plus) just cannot match in my experience. Having seen `varnishlog` and `varnishtest` in action alone are worth spending a day or two exploring it.
- microcolonel 8y agoIdunno, it seems fine to me. There are plenty of HTTP daemons that get the job done though, and if you have exacting requirements, there's nothing particularly difficult about writing your own specialized one (generally you don't have to write every feature of NGINX).
- dharmab 8y agoWe've had good experiences with https://www.envoyproxy.io https://www.envoyproxy.io.
- johnchristopher 8y agoThen again most nginx users are going to be fine with haproxy/traefik in front of good old apache or lighttpd. Or even just apache.
- akvadrako 8y agoI've replaced most of my nginx instances with traefik, except those just serving static files. The configuration is more straightforward and the EncryptIt integration is a lot more elegant than in nginx's case.
- bovermyer 8y agoThe last two companies I've worked for used træfik and haproxy, and just this last weekend I converted my home clusters from nginx to træfik. nginx is fine, but there are now other options that work just as well.
- hcnews 8y agoCurious, why not envoy (https://www.envoyproxy.io/ https://www.envoyproxy.io/)? Its open-source, used/supported by variety of companies, has more features than NGINX.
- coder543 8y agoEnvoy doesn't support static file serving: https://github.com/envoyproxy/envoy/issues/378 https://github.com/envoyproxy/envoy/issues/378 I'm sure that's not the only feature it's missing compared to nginx. Envoy is not very comparable to nginx, in my opinion... but I also wouldn't reach for varnish as an nginx alternative either.
- vasilia 8y agoEnvoy is not the web server, it's load balancer. If you want to serve static files It will be better to use any other software. Furthermore, it is a very complex problem for HTTPS servers, because the Linux kernel doesn’t have full-featured TLS support for sendfile syscall. I implemented daemon which is used as in-memory storage for static files and client for our proprietary web server. Trust me :)
- sneak 8y agoThe same nginx I was using yesterday, I have a license for tomorrow.
- mholt 8y agoYou already have a license for it today, too.
- DangitBobby 8y agoAre you the person behind caddy or is your username just a coincidence? Edit: sorry, I should have just checked your profile.
- darksoul 8y agoAccording to the public statements, F5 is committing to maintain the current level of resources NGINX has allocated to their open source programs, to keep the same dev team involved, to keep licensing as it currently is, not change any of the repositories on Mercurial and GitHub and to keep the NGINX brand. Which only means that NGINX will get even better over time.
- EvangelicalPig 8y agoHopefully if it declines we can have a MariaDB type fork take it's place.
- deleted 8y ago[deleted]
- beatgammit 8y agonginy? But yeah, hopefully the community around it is solid enough to make that a possibility. I'd really prefer to not go back to Apache...
- dharmab 8y agoPronounced "en-genie", with an oil lamp as the logo?
- Rexxar 8y agoIncrementing all letters : "nginx" => "ohjoy"
- EvangelicalPig 8y agoYou win
- foobarbazetc 8y agoEvery company that has ever acquired anything says this exact same thing. Then the deal closes and it’s back to bottom line numbers.
- deleted 8y ago[deleted]
- deleted 8y ago[deleted]
- renchap 8y agoI really like h2o (https://h2o.examp1e.net https://h2o.examp1e.net) as a nginx replacement, very nice software, lot of features, extensibility using mruby and amazing perf.
- petercooper 8y agoh2o is neat, although its next version has sat in beta for something like 9 months.
- speeq 8y agoDoes varnish support SSL? Last I checked, I had to run nginx in front of it for https.
- reza_n 8y agohttps://hitch-tls.org/ https://hitch-tls.org/
- ummonk 8y agoGiven how widely used nginx is, wouldn’t a community maintained fork be the most likely outcome of things changing for the worse?
- adam_ellsworth 8y agoThe antithetic case here has precedence too (node/iojs amongst others) - "org realizes its share of the base tech has outlived its 'welcome' to no real financial benefit". But I guess a more pressing question is: can a corporate entity be "hands-off" enough so that its subsidiary has room to work as effectively as it had prior to its acquisition? I don't have the wherewithal to get at these arguments from any angle (and I'm certain I'm missing many others). Studious maintenance of the base code and branches/PRs besides build tried/true code bases and I hope that we're not being torn of that practice from this buyout; but only time will tell ...
- jimjag 8y agoThe problem, of course, when all contributions are "limited" to those within the company, that the talent and expertise required to keep things going exist just in the company itself, and not in the overall open source community. So when the company behind the tech "goes away", all the knowledge does too. It's for that reason that open source that is totally under the control of one company is so dangerous. Sure, you have the ability to fork, but the reality is that such a fork is almost assuredly doomed to fail. You really are beholden to that company.
- fulafel 8y agoThe replacement should be written in a memory-safe language. Including the TLS library. "There is more to life than increasing its speed."
- dymk 8y agoDoes it start with an "R" and rhyme with "repeated-so-often-its-been-ground-into-the-dust"?
- otabdeveloper1 8y ago> The replacement should be written in a memory-safe language. Including the TLS library. No. Memory safety is a vanishingly small subset of all bugs and security problems. PHP is memory-safe, for example. Where has that gotten us? > "There is more to life than increasing its speed." Not if you're a computer.
- fulafel 8y agoI'm not sure if you are trolling or not. Just in case: all rce vulns in nginx have been memory safety bugs: https://www.cvedetails.com/vulnerability-list/vendor_id-10048/product_id-17956/opec-1/Nginx-Nginx.html https://www.cvedetails.com/vulnerability-list/vendor_id-1004...
- otabdeveloper1 8y agoRead what I posted again. The number of security vulnerabilities due to PHP's crappiness is two orders of magnitude greater than all of nginx vulnerabilities combined. Yet PHP is a memory-safe language. Memory safety won't fix anything by itself, it will just shuffle the shit into some other place. Now if you're claiming that if you take nginx developers and force them to use Rust they'll somehow start writing better code, then that's a valid point. Although I'm in extreme doubt that it is realistic or even true.