4 ms·

> The situation of nginx in OpenBSD frustrated me What situation?

by talles 12y ago

notacoward 12y ago
"It wasn't invented here."
- kgadek 12y ago
  Possibly (dunno). But they refer to that on slide 7: - We also introduced new safer APIs like reallocarray() - I wrote a big diff for nginx to adopt reallocarray() other such techniques - And it got rejected.
  - yarrel 12y ago
    Is reallocarray() BSD-specific? That might explain it.
    - wongarsu 12y ago
      It's OpenBSD specific. But it's also just 10 lines of portable C that are permissively licensed and can be added to any project without problems. It's even in a separate source file for this very purpose [1] [1] https://github.com/robertbachmann/openbsd-libc/blob/master/stdlib/reallocarray.c https://github.com/robertbachmann/openbsd-libc/blob/master/s...
      - angersock 12y ago
        I like that. I might even swipe it for my own projects.
- nickysielicki 12y ago
  how do you get off making snide comments like this? They're not doing this because of some mythical elitism that everyone and their mother seems to think openbsd has. They're doing it because they like high quality code and they were pushed this direction by nginx.
- easytiger 12y ago
  Don't know why you are being downvoted, that is a huge amount of the motivation behind openbsds innovations.
  - pyvpx 12y ago
    you're both being downvoted because you're both completely wrong. it turns out permissively licensed, security-focused, and easy to maintain code bases aren't easy to find outside of OpenBSD. so sometimes they have to write their own. say, a packet filter, for example...
  - nickysielicki 12y ago
    did you even RTFA? They wanted to continue using nginx.
    - easytiger 12y ago
      Exactly, they want to appropriate it and improve it in line with their philospohy. That isn't incompatible with my comment.
      - nickysielicki 12y ago
        That would be forking, no? They're not appropriating it. They're just creating another reverse proxy.
- DominikD 12y ago
  That'd be true if it weren't for a bunch of external projects that OpenBSD uses or which are hosted as part of OBSD but weren't invented by the OpenBSD folks (tmux is one such example). It all boils down to priorities: if your priority is security, chances are there's very little code out there you can drop in and use.
stsp 12y ago
See https://news.ycombinator.com/item?id=9202522 https://news.ycombinator.com/item?id=9202522
nickysielicki 12y ago
...did you just skip to slide 8? Explaining that was the first 7 slides. - They need a web-server in base. - They demand security. - He submitted a patch for nginx to embrace new secure methods. - It was rejected. - Because a base server is required in base, and they don't want to maintain a fork of nginx for base: "Introducing HTTPD".
deleted 12y ago
[deleted]
deleted 12y ago
[deleted]

> The situation of nginx in OpenBSD frustrated me What situation?

by talles 12y ago

> The situation of nginx in OpenBSD frustrated me What situation?

notacoward 12y ago

"It wasn't invented here."

kgadek 12y ago
Possibly (dunno). But they refer to that on slide 7: - We also introduced new safer APIs like reallocarray() - I wrote a big diff for nginx to adopt reallocarray() other such techniques - And it got rejected.
- yarrel 12y ago
  Is reallocarray() BSD-specific? That might explain it.
  - wongarsu 12y ago
    It's OpenBSD specific. But it's also just 10 lines of portable C that are permissively licensed and can be added to any project without problems. It's even in a separate source file for this very purpose [1] [1] https://github.com/robertbachmann/openbsd-libc/blob/master/stdlib/reallocarray.c https://github.com/robertbachmann/openbsd-libc/blob/master/s...
    - angersock 12y ago
      I like that. I might even swipe it for my own projects.
nickysielicki 12y ago
how do you get off making snide comments like this? They're not doing this because of some mythical elitism that everyone and their mother seems to think openbsd has. They're doing it because they like high quality code and they were pushed this direction by nginx.
easytiger 12y ago
Don't know why you are being downvoted, that is a huge amount of the motivation behind openbsds innovations.
- pyvpx 12y ago
  you're both being downvoted because you're both completely wrong. it turns out permissively licensed, security-focused, and easy to maintain code bases aren't easy to find outside of OpenBSD. so sometimes they have to write their own. say, a packet filter, for example...
- nickysielicki 12y ago
  did you even RTFA? They wanted to continue using nginx.
  - easytiger 12y ago
    Exactly, they want to appropriate it and improve it in line with their philospohy. That isn't incompatible with my comment.
    - nickysielicki 12y ago
      That would be forking, no? They're not appropriating it. They're just creating another reverse proxy.
DominikD 12y ago
That'd be true if it weren't for a bunch of external projects that OpenBSD uses or which are hosted as part of OBSD but weren't invented by the OpenBSD folks (tmux is one such example). It all boils down to priorities: if your priority is security, chances are there's very little code out there you can drop in and use.

stsp 12y ago

See https://news.ycombinator.com/item?id=9202522 https://news.ycombinator.com/item?id=9202522

nickysielicki 12y ago

...did you just skip to slide 8? Explaining that was the first 7 slides. - They need a web-server in base. - They demand security. - He submitted a patch for nginx to embrace new secure methods. - It was rejected. - Because a base server is required in base, and they don't want to maintain a fork of nginx for base: "Introducing HTTPD".

deleted 12y ago

[deleted]

deleted 12y ago

[deleted]