kentonv

26 ms·

511.
by kentonv 2y ago
Oh, well, thank you! You should probably take me with a grain of salt: of course, I, the technical architect of Sandstorm, still think the technical architecture is great. ;) Whereas I never claimed to be good at business so I'm not ad
512.
by kentonv 2y ago
> I'd love to be able to talk to Kenton Varda about why he thinks adoption on it was weak. Oh hai. Honestly I'm not sure I'm a reliable source for why we failed. It's tempting to convince myself of convenient excuses.
513.
by kentonv 2y ago
If a company makes unambiguous claims in their advertising which turn out to be false, they will get sued and maybe even fined by regulators. Much of the world does in fact operate on this kind of trust.
514.
by kentonv 2y ago
> The CDN does cache stuff on QRO often but Workers and KV are a completely different story. I don't know of any way that requests to the same hostname could go to QRO for cache but not for Workers. Once the HTTP headers are parsed,
515.
by kentonv 2y ago
> Cloudflare doesn't execute workers in all their PoPs. Yes we do! > I'm in central Mexico and my workers execute in DFW even though there's a Cloudflare PoP not even 30 mins away from here (QRO). I think you will find
516.
by kentonv 2y ago
That seems a bit harsh. Maybe they just wanted it to be a drop-in replacement for glibc...
517.
by kentonv 2y ago
Disappointing that errors are still signaled by assigning to `errno` (you can apparently override this to some other global, but it has to be a global or global-like lvalue). The kernel actually signals errors by returning a negative error
518.
by kentonv 2y ago
Right, that's exactly the idea. You could build your own CGI-like hosting platform using WfP to run untrusted JavaScript. To be clear the two caveats don't apply to WfP. The cache API is disabled there. The origin thing can be sol
519.
by kentonv 2y ago
So, two possibilities: 1. If you have a relatively small number of users whom you want to permit to deploy stuff on parts of a Cloudflare account, you may need to wait for finer-grained RBAC controls to be fleshed out more. It's being
520.
by kentonv 2y ago
> I don’t think Cloudflare workers, as deployed by Cloudflare, really tick that box either. They mostly do. You can map different Workers to different paths in your site. A Worker can only access the resources it is explicitly bound to.
521.
by kentonv 2y ago
And the author of the article contacted me because of this old HN comment: https://news.ycombinator.com/item?id=26593117 (Also, I am typing this while alt-tabbed out of Factorio...)
522.
by kentonv 2y ago
> Periodically merge upstream libgit2 in your custom fork, maintain your custom git server code and audit it for vulnerabilities, make sure everything still compiles with emscripten, deploy it. There's only a difference here because
523.
by kentonv 2y ago
Huh, I never really thought of that as a unique property of Sandstorm, but you're absolutely right, this is essential to any software intended to be operated by a non-technical end user, and Sandstorm is aggressive about it (e.g. apps
524.
by kentonv 2y ago
I'm the tech lead of Cloudflare Workers. I'm not actually the best person to answer the core questions here, but a few notes: Cloudflare's Data Localization Suite gives you some control over where things run: https:/&#x
525.
by kentonv 2y ago
As others have noted, you misunderstand how Durable Objects work. All traffic addressed to the same object is routed to a single machine where that object lives. That machine always has a consistent view of its SQLite database. You can have
526.
by kentonv 2y ago
Ugh didn't notice until too late to edit, but apparently HN interpreted my asterisk as an instruction to italicize everything between it and the footnote it referred to.
527.
by kentonv 2y ago
We (Cloudflare) have considered adding an API to create multiple "database connections" , especially to be able to stream a response from a long-running cursor while representing a consistent snapshot of the data. It's a bit
528.
by kentonv 2y ago
But how do you know that the field called "FD" is meaningful if the message is a totally different schema than the one you were expecting? In general there's very little you can really do with a dynamic schema. Perhaps you ca
529.
by kentonv 2y ago
Which implementation were you using? (I.e. which programming language?)
530.
by kentonv 2y ago
> It is "cringe", because you have degraded SQLite to nothing but an overly verbose key value store. Honestly I kind of agree with this. It feels like the main benefit over a key-value store at that point is just automatic mana
531.
by kentonv 2y ago
You are probably thinking of Worker RPC, which is ocap-based: https://blog.cloudflare.com/javascript-native-rpc/ At present output gates operate on the scope of a single worker, blocking the output from being sent. It&
532.
by kentonv 2y ago
Output gates block all output, including outgoing requests. That's why they are called "output gates" and not "response gates". We (Cloudflare) control the whole runtime that Workers run in so it's pretty easy
533.
by kentonv 2y ago
I've thought about this... what if output gates were a sort of contagious thing across Cloudflare's network, so they don't block communications to other workers (including DOs), but instead the output gate extends around the
534.
by kentonv 2y ago
As described in the blog post, each write is replicated to machines in five different datacenters, and not confirmed until a quorum of three acknowledge it. So you'd need a power loss in three geographically-separated datacenters simul
535.
by kentonv 2y ago
What EC2s? Cloudflare operates its own physical machines, it does not use AWS.
536.
by kentonv 2y ago
Of course! And network traffic is encrypted even on LAN.
537.
by kentonv 2y ago
You may be interested in: https://www.cloudflare.com/data-localization/
538.
by kentonv 2y ago
Hmm. I haven't actually used a Windows desktop for anything other than gaming in decades. Probably the last time I actually used my remapping tool on Windows was in the XP days. I guess it's possible that Windows 10+ now includes
539.
by kentonv 2y ago
That sounds way more painful TBH...
540.
by kentonv 2y ago
I'm a longtime dvorak user. The shortcut issue is so bad I had to write software that makes the keyboard layout switch while ctrl/alt is held. I've used at least four different implementations of this, three I wrote myself:

More ›