mirror of
https://github.com/jart/cosmopolitan.git
synced 2025-02-07 23:13:34 +00:00
f3e28aa192
This change boosts SSL handshake performance from 2,627 to ~10,000 per
second which is the same level of performance as NGINX at establishing
secure connections. That's impressive if we consider that redbean is a
forking frontend application server. This was accomplished by:
1. Enabling either SSL session caching or SSL tickets. We choose to
use tickets since they reduce network round trips too and that's
a more important metric than wrk'ing localhost.
2. Fixing mbedtls_mpi_sub_abs() which is the most frequently called
function. It's called about 12,000 times during an SSL handshake
since it's the basis of most arithmetic operations like addition
and for some strange reason it was designed to make two needless
copies in addition to calling malloc and free. That's now fixed.
3. Improving TLS output buffering during the SSL handshake only, so
that only a single is write and read system call is needed until
blocking on the ping pong.
redbean will now do a better job wiping sensitive memory from a child
process as soon as it's not needed. The nice thing about fork is it's
much faster than reverse proxying so the goal is to use the different
address spaces along with setuid() to minimize the risk that a server
key will be compromised in the event that application code is hacked.
125 lines
4.8 KiB
C
125 lines
4.8 KiB
C
/*-*- mode:c;indent-tabs-mode:nil;c-basic-offset:2;tab-width:8;coding:utf-8 -*-│
|
|
│vi: set net ft=c ts=2 sts=2 sw=2 fenc=utf-8 :vi│
|
|
╞══════════════════════════════════════════════════════════════════════════════╡
|
|
│ Copyright 2020 Justine Alexandra Roberts Tunney │
|
|
│ │
|
|
│ Permission to use, copy, modify, and/or distribute this software for │
|
|
│ any purpose with or without fee is hereby granted, provided that the │
|
|
│ above copyright notice and this permission notice appear in all copies. │
|
|
│ │
|
|
│ THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL │
|
|
│ WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED │
|
|
│ WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE │
|
|
│ AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL │
|
|
│ DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR │
|
|
│ PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER │
|
|
│ TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR │
|
|
│ PERFORMANCE OF THIS SOFTWARE. │
|
|
╚─────────────────────────────────────────────────────────────────────────────*/
|
|
#include "libc/bits/bits.h"
|
|
#include "libc/calls/calls.h"
|
|
#include "libc/calls/struct/stat.h"
|
|
#include "libc/calls/struct/timeval.h"
|
|
#include "libc/dce.h"
|
|
#include "libc/errno.h"
|
|
#include "libc/fmt/conv.h"
|
|
#include "libc/fmt/fmt.h"
|
|
#include "libc/log/internal.h"
|
|
#include "libc/log/log.h"
|
|
#include "libc/math.h"
|
|
#include "libc/nexgen32e/nexgen32e.h"
|
|
#include "libc/runtime/runtime.h"
|
|
#include "libc/stdio/stdio.h"
|
|
#include "libc/str/str.h"
|
|
#include "libc/sysv/consts/fileno.h"
|
|
#include "libc/time/struct/tm.h"
|
|
#include "libc/time/time.h"
|
|
|
|
#define kNontrivialSize (8 * 1000 * 1000)
|
|
|
|
static struct timespec vflogf_ts;
|
|
|
|
/**
|
|
* Takes corrective action if logging is on the fritz.
|
|
*/
|
|
void vflogf_onfail(FILE *f) {
|
|
errno_t err;
|
|
struct stat st;
|
|
if (IsTiny()) return;
|
|
err = ferror(f);
|
|
if (fileno(f) != -1 && (err == ENOSPC || err == EDQUOT || err == EFBIG) &&
|
|
(fstat(fileno(f), &st) == -1 || st.st_size > kNontrivialSize)) {
|
|
ftruncate(fileno(f), 0);
|
|
fseek(f, SEEK_SET, 0);
|
|
f->beg = f->end = 0;
|
|
clearerr(f);
|
|
(fprintf)(f, "performed emergency log truncation: %s\n", strerror(err));
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Writes formatted message w/ timestamp to log.
|
|
*
|
|
* Timestamps are hyphenated out when multiple events happen within the
|
|
* same second in the same process. When timestamps are crossed out, it
|
|
* will display microseconsd as a delta elapsed time. This is useful if
|
|
* you do something like:
|
|
*
|
|
* LOGF("connecting to foo");
|
|
* connect(...)
|
|
* LOGF("connected to foo");
|
|
*
|
|
* In that case, the second log entry will always display the amount of
|
|
* time that it took to connect. This is great in forking applications.
|
|
*/
|
|
void(vflogf)(unsigned level, const char *file, int line, FILE *f,
|
|
const char *fmt, va_list va) {
|
|
int bufmode;
|
|
struct tm tm;
|
|
long double t2;
|
|
const char *prog;
|
|
bool issamesecond;
|
|
char buf32[32], *buf32p;
|
|
int64_t secs, nsec, dots;
|
|
if (!f) f = __log_file;
|
|
if (!f) return;
|
|
++ftrace;
|
|
t2 = nowl();
|
|
secs = t2;
|
|
nsec = (t2 - secs) * 1e9L;
|
|
issamesecond = secs == vflogf_ts.tv_sec;
|
|
dots = issamesecond ? nsec - vflogf_ts.tv_nsec : nsec;
|
|
vflogf_ts.tv_sec = secs;
|
|
vflogf_ts.tv_nsec = nsec;
|
|
if (!issamesecond) {
|
|
localtime_r(&secs, &tm);
|
|
strcpy(iso8601(buf32, &tm), ".");
|
|
buf32p = buf32;
|
|
} else {
|
|
buf32p = "--------------------";
|
|
}
|
|
prog = basename(program_invocation_name);
|
|
bufmode = f->bufmode;
|
|
if (bufmode == _IOLBF) f->bufmode = _IOFBF;
|
|
if ((fprintf)(f, "%c%s%06ld:%s:%d:%.*s:%d] ", "FEWIVDNT"[level & 7], buf32p,
|
|
rem1000000int64(div1000int64(dots)), file, line,
|
|
strchrnul(prog, '.') - prog, prog, getpid()) <= 0) {
|
|
vflogf_onfail(f);
|
|
}
|
|
(vfprintf)(f, fmt, va);
|
|
va_end(va);
|
|
fputs("\n", f);
|
|
if (bufmode == _IOLBF) {
|
|
f->bufmode = _IOLBF;
|
|
fflush(f);
|
|
}
|
|
if (level == kLogFatal) {
|
|
__start_fatal(file, line);
|
|
strcpy(buf32, "unknown");
|
|
gethostname(buf32, sizeof(buf32));
|
|
(dprintf)(STDERR_FILENO, "fatality %s pid %d\n", buf32, getpid());
|
|
__die();
|
|
unreachable;
|
|
}
|
|
--ftrace;
|
|
}
|