tempesta

tempesta copied to clipboard

The issue is inspired by comment https://github.com/tempesta-tech/tempesta/pull/960#pullrequestreview-104860832 and #962 . It seems some existing test(s) must be enhanced to catch and check the cases for keeping request/response sequence: 1. a...

krizhanovsky

Functional test is needed for reconfiguration scenario with appending new connections for existing server (connections number for server in old configuration is less then the number of connections for the...

aleksostapenko

Incorrect restoring of responces from chunked cache entries

2

Applicable to saving and restoring responses from _chunked_ cache entry. There is a situation when `TfwCStr` header can't be fit into the rest of current data chunk (`TdbVRec`). In this...

vankoven

`tempesta_map_file()` uses `kernel_read()`, and expects it to always succeed. However, it's possible to receive `-EINTR` from it, or get a partial read. That makes Tempesta fail to start. Investigate possibility...

i-rinat

TDB torture triggers BUG_ON() at /tempesta_db/core/htrie.c:567

2

It's possible to trigger `BUG_ON()` in `tdb_htrie_descend()` at `tempesta_db/core/htrie.c:567` by repeatedly requesting `index.html` with different query parameters. Here is a example that I used: ``` for i in $(seq 1000000);...

i-rinat

The bug is hard to reproduce, I saw it only could of times in tests like https://github.com/tempesta-tech/tempesta/issues/515#issuecomment-762103542 : ``` [ 34.215054] BUG: unable to handle kernel paging request at ffffeb04003c0260...

krizhanovsky

Huge pages allocation issue and the crash on cache sizes >=2GB

8

Т.к. в нашем распоряжении не было процессоров на микроархитектуре Broadwell, а были в наличие только **Haswell** (машины на основе 2-х процессоров **Xeon E5-2697 v2** и **E5-2673 v2**), о чем уже...

DagothDeer

Kernel-User Space Transport

1

# Motivation and architecture We need to export some logic to user-space and/or third-party servers. User-space tasks must be done asynchronously to softirq processing, just like `NF_QUEUE` for the netfilter....

krizhanovsky

Full TLS proxying

1

# Protocol Currently Tempesta can only terminate TLS traffic acting as a TLS accelerator/terminator. However, CDNs and filtering networks do require [full TLS](https://support.cloudflare.com/hc/en-us/articles/204144518-SSL-FAQ), i.e. establish encrypted channel between Tempesta and...

krizhanovsky

Transparent proxy mode

1

The issue is TBD and may be split into several separate issues for particular subtasks. ### Transparent proxy A DDoS filtration scenario may include the case with a transparent proxy...

krizhanovsky