Conrad Ludgate

Latest ideas: 1. Use cert_manager in kubernetes to assign a certificate to each compute. * Problem: does it slow the compute startup time? 2. Use control plane to assign a...

We haven't yet planned any specific design. Needs input from SRE on how we want to provision certificates. Gut feeling: Control Plane returns compute_id in the response from wake_compute, so...

From speaking with @mickael-carl, we need to make sure we don't store compute certificate private keys in a secret. All computes run in the default namespace, so that's a risk....

See: https://github.com/neondatabase/cloud/issues/23007#issuecomment-2728662952 https://neondb.slack.com/archives/C039YKBRZB4/p1741963839346659?thread_ts=1740399280.205909&cid=C039YKBRZB4

I need to update my impl to use rolling. Currently it's sample+clear, but rolling would protect from lost samples, although it smears the results so they have less temporal resolution

As a slight reassurance, godbolt doesn't demonstrate such a branch in the current rust code on x86_64, although still good to ensure that it won't in a future update to...

Alternative solution: Split API like a channel. `TaskSpawner` and `TaskWaiter`. `TaskWaiter` has 2 functions: `async fn wait(self) -> ()` and `fn spawner(&self) -> TaskSpawner`. Waiting on the TaskWaiter immediately marks...

The issue seems to be that rocket is hardcoding no TLS implementation. https://github.com/rwf2/Rocket/blob/f9de1bf4671100b2f9c9bea6ce206fc4748ca999/contrib/db_pools/lib/src/pool.rs#L170 It seems the sqlx implementation is configured to use runtime-tokio-rustls feature. It would not be too much...

Further testing shows that, for large buffers, removing the vectored write support is a significant source of the regressions. Now the difference it just 43500 Msg/sec compared to 44000 Msg/sec...

I've always pictured dependency injection in rust to use traits, as traits are a way to abstract sets of behaviour, so this RFC out of all of them feels the...