精读预计 1 分钟

Caddy compatibility for zeroserve: 3x throughput and 70% lower latency

摘要

zeroserve 是一款在用户态运行 eBPF 脚本的高性能 HTTPS 服务器。它通过将 Caddyfile JIT 编译为原生机器码并结合 io_uring 运行，在保持 Caddy 配置简便性的同时，达到了与 Nginx 相当的性能水平。实测显示其吞吐量约为 Caddy 的 3 倍，延迟降低 70%，且支持在配置文件中嵌入自定义 eBPF 逻辑。

荐读理由

若你的项目因 Caddy 性能受限，可利用 zeroserve 提供的 Caddyfile 兼容模式，通过 eBPF JIT 编译和 io_uring 轮询在不改变配置习惯的前提下获得媲美 Nginx 的高吞吐与低延迟。

原文

zeroserve is a high-performance HTTPS server that runs eBPF scripts in userspace (intro). Now it's got a Caddy-compat mode - when provided a Caddyfile, zeroserve JIT-compiles it to eBPF and then to native x86_64/ARM64 machine code, and runs it in an io_uringevent loop.

protocol	server	throughput	p50	p99	peak RSS
https	zeroserve-clang	38,948 req/s	1.45ms	3.91ms	30.9 MiB
https	zeroserve-tcc	36,653 req/s	1.67ms	4.00ms	34.2 MiB
https	caddy	12,529 req/s	4.74ms	13.11ms	67.4 MiB
https	nginx	37,424 req/s	1.57ms	4.24ms	25.7 MiB

HTTPS reverse proxy, 2 threads, AMD Ryzen 7 3700X. Check CI for original run result.

Try it with your Caddyfile:

curl -fL -o zeroserve https://github.com/losfair/zeroserve/releases/download/v0.2.11/zeroserve-$(uname -m)-linux
chmod +x zeroserve
./zeroserve --caddy /etc/caddy/Caddyfile
curl http://127.0.0.1:8080

zeroserve runs turing-complete eBPF and you can call custom code from your Caddyfile. For example, to reverse-proxy a path to an S3-compatible bucket with AWS SigV4 auth, grab io.su3.aws-sigv4.c and then:

# zeroserve --plugin io.su3.aws-sigv4.c --caddy Caddyfile

example.com {
  route /s3/* {
    uri strip_prefix /s3
    rewrite * /my-bucket{uri}

    # Call the `sign_request` method in the eBPF middleware `io.su3.aws-sigv4.o`
    zeroserve_call io.su3.aws-sigv4 sign_request {
      access_key_id "minioadmin"
      secret_access_key "minioadmin"
    }

    reverse_proxy http://127.0.0.1:9000
  }
}

Hacker News · 90 赞 · 23 评讨论 → 阅读原文 →

这条对你有帮助吗？