I think I'm just gonna turn off my website until we figure out what the fuck is going on
0 Boosts
0 Likes
This federated comment is not yet available here.
@foone @eli my proposed setup for running anything publicly exposed in 2026:
Client <-- HTTP/2 --> Proxy 1 (OpenBSD/amd64, Traefik) <-- HTTP/3 --> Proxy 2 (Linux (musl)/arm64, apache2) <-- HTTP/2 --> Proxy 3 (FreeBSD/amd64 rpxy) <-- HTTP/1.1 --> App Server/Kubernetes internet inbound
That should give you enough system variance to guard against protocol & network stack attacks 💀
/s
@foone place I work at just temporarily switched back to http1.
*Should* be fine
@foone can you just do this for all the websites. just until we figure it out
@foone Uh, what happened now?