Tom Carrio tcarrio

Nginx TLS SNI routing, based on subdomain pattern

Nginx can be configured to route to a backend, based on the server's domain name, which is included in the SSL/TLS handshake (Server Name Indication, SNI).
This works for http upstream servers, but also for other protocols, that can be secured with TLS.

prerequisites

at least nginx 1.15.9 to use variables in ssl_certificate and ssl_certificate_key.
check nginx -V for the following:
```
...
TLS SNI support enabled
```

Quick Tips for Fast Code on the JVM

I was talking to a coworker recently about general techniques that almost always form the core of any effort to write very fast, down-to-the-metal hot path code on the JVM, and they pointed out that there really isn't a particularly good place to go for this information. It occurred to me that, really, I had more or less picked up all of it by word of mouth and experience, and there just aren't any good reference sources on the topic. So… here's my word of mouth.

This is by no means a comprehensive gist. It's also important to understand that the techniques that I outline in here are not 100% absolute either. Performance on the JVM is an incredibly complicated subject, and while there are rules that almost always hold true, the "almost" remains very salient. Also, for many or even most applications, there will be other techniques that I'm not mentioning which will have a greater impact. JMH, Java Flight Recorder, and a good profiler are your very best friend! Mea

	import * as Http from "@effect/platform/HttpServer";
	import { Effect } from "effect";
	import * as S from "@effect/schema/Schema";

	const HttpLive = Http.router.empty.pipe(
	Http.router.get("/", Http.response.text("Hello World")),
	Http.router.get(
	"/todo/:id",
	Effect.gen(function* ($) {
	const { id } = yield* $(

	{-# LANGUAGE TypeSynonymInstances #-}
	data Dual d = D Float d deriving Show
	type Float' = Float

	diff :: (Dual Float' -> Dual Float') -> Float -> Float'
	diff f x = y'
	where D y y' = f (D x 1)

	class VectorSpace v where
	zero :: v

	#!/bin/bash

	## Create the response FIFO
	rm -f response
	mkfifo response

	function handle_GET_home() {
	RESPONSE=$(cat home.html \| \
	sed "s/{{$COOKIE_NAME}}/$COOKIE_VALUE/")
	}

	###
	### [2023-06-19] UPDATE: Just tried to use my instructions again on a fresh install and it failed in a number of places.
	###. Not sure if I'll update this gist (though I realise it seems to still have some traffic), but here's a list of
	###. things to watch out for:
	### - Check out the `nix-darwin` instructions, as they have changed.
	### - There's a home manager gotcha https://github.com/nix-community/home-manager/issues/4026
	###

	# I found some good resources but they seem to do a bit too much (maybe from a time when there were more bugs).
	# So here's a minimal Gist which worked for me as an install on a new M1 Pro.

	#lang racket/base

	;; Generate a form email to let someone know their SPF records are misconfigured for their current email provider.
	;;
	;; Run (fill-report "domain.com" "1.2.3.4") where the 2nd arg is the sending email server's IP address.
	;; It will copy the completed report to the clipboard for you.

	;; Only works on Windows for now.

	(require net/dns

	#!/usr/bin/env sh
	set -- $(locale LC_MESSAGES)
	yesptrn="$1"; noptrn="$2"; yesword="$3"; noword="$4"

	parent_path=$( cd "$(dirname "${BASH_SOURCE[0]}")" ; pwd -P )

	input_sink=$(pacmd stat \|grep -o -P "(?<=Default source name: ).*")
	output_sink=$(pacmd stat \|grep -o -P "(?<=Default sink name: ).*")

	echo "Input:" $input_sink

	/* This has moved to:
	* https://github.com/devonzuegel/digital-nesting/blob/master/zoom/zoom.js
	*/

	This is the empty file you have to create in traefik/certificates.json, as mentioned in Traefik's docker-compose.yml file
	This file will contain your private keys, so remember to perform a 'chmod 600' on it or else Traefik won't store anything in it