Live data from Hacker News

Freenginx: Core Nginx developer announces fork

mailman.nginx.org

231–240 of 501 posts

Re: Freenginx: Core Nginx developer announces fork

#231
post #80

Earlier quoted context omitted.

Well, until you read https://news.ycombinator.com/item?id=39351026

And? (That isn't about Caddy, rather a third-party plugin.)

Have you finally decided to match FQDN URLs correctly?

I'd love to get rid of the part of my clients' codebase that starts with // workaround for broken caddy servers

Re: Freenginx: Core Nginx developer announces fork

#232

Earlier quoted context omitted.

Lots of people are using haproxy

My org moved off nginx for haproxy after we learned that (at the time, maybe it changed) reloading an nginx config, even if done gracefully through kernel signals, would drop existing connections, where haproxy could handle it gracefully. That was a fun week of diving in to some C code looking for why it was behaving that way.

we went in the opposite direction, not because haproxy was bad, just because nginx had a simpler config, and i think we were paying for haproxy but don't pay for nginx.

all that said, neither drops existing connections on reload

Re: Freenginx: Core Nginx developer announces fork

#234

It is scary to think about how much of web relies on projects maintained by 1 or 2 people.

I think if 2 people designed most of the world’s water treatment plants, that’s not scary.

If 2 people are operating the plants, that’s terrifying.

Re: Freenginx: Core Nginx developer announces fork

#235

I don't understand why some people use a Russian software! Especially in this age.

While I may share the general sentiment, there’s a freaking lot of “Russian software” out there which you may be knowingly or unknowingly use. There is JetBrains, for example. But there is also core-js which is a little polyfill library being used by like way more than half of high profile websites. Also written by a Russian national. If you excise all contributions by Russian nationals to PostgreSQL or the Linux ker…

Regarding Jebrains - both owners have renounced their Russian citizenship and are now citizens of Cyprus: https://www.forbes.com/profile/valentin-kipyatkov/ Plus the HQ is in Prague, Czech Republic: https://www.economist.com/europe/2021/05/27/russia-puts-the-...

Re: Freenginx: Core Nginx developer announces fork

#236
post #200

Given this fork still boasts a 2-clause BSD license, the corporate nginx can still make the effort to backport patches. It's certainly harder than requiring a single converged development branch, but how closely they track Maxim's work is ultimately up to them. If nginx continues to receive more attention from security researchers, I imagine Maxim will have good reasons to backport fixes the other way too, or at leas…

I'm curious to see where this fork will go. The whole situation is a mess:

- nginx is "open core", with some useful features in the proprietary version.

- angie (a fork by several core devs) has a CLA, which sounds like a bait and switch waiting to happen and distro's won't package it

- freenginx is at least open source. But who knows if it'll still be around by June.

Re: Freenginx: Core Nginx developer announces fork

#238

I don't get it...does not he knows about angie [1]? It was created by NGINX core devs after F5 acquisition if I'm not mistaken and it's a drop-in replacement for NGINX. [1] https://github.com/webserver-llc/angie

This surely is the question. Why not Angie?

The main criticism is that it requires signing a CLA, so they might switch to a non-free license any day now.

Re: Freenginx: Core Nginx developer announces fork

#239

Earlier quoted context omitted.

Lots of people are using haproxy

My org moved off nginx for haproxy after we learned that (at the time, maybe it changed) reloading an nginx config, even if done gracefully through kernel signals, would drop existing connections, where haproxy could handle it gracefully. That was a fun week of diving in to some C code looking for why it was behaving that way.

Another issue with nginx IIRC is that it allows HTTP request smuggling, which is a critical security vulnerability.

Re: Freenginx: Core Nginx developer announces fork

#240

Earlier quoted context omitted.

Could be related to the fact that Angie offers 'pro' version: https://wbsrv.ru/angie-pro/docs/en/ From statement: "Instead, I’m starting an alternative project, which is going to be run by developers, and not corporate entities"

Hm. I guess this consultancy-on-a-paid-version model doesn't bother me (and clearly didn't bother the developer of freenginx while they were paying him). But a double fork can't be good.

> clearly didn't bother the developer of freenginx while they were paying him

Clearly it did, so much so that he gave up all that pay.

Post reply on HN