Hacker News: evanphx

New comment by evanphx in "I am building a cloud"

evanphx — Thu, 23 Apr 2026 15:25:04 +0000

If you're open, love to get your thoughts on https://miren.dev. We've doing similar things, but leaning into the small team aspects of these systems, along with giving folks an optional cloud tie in to help with auth, etc.

New comment by evanphx in "I am building a cloud"

evanphx — Thu, 23 Apr 2026 15:22:10 +0000

Are you doing that across a fleet of machines or just one?

New comment by evanphx in "I am building a cloud"

evanphx — Thu, 23 Apr 2026 15:19:22 +0000

Totally, it's all about the primitives. I'm curious where exe.dev is gonna build on the the base, or just leave it up to folks to add all their own bespoke stuff to do containers, logs, etc.

The last 20 years has given us a lot of great primitives for folks to plug in, I think that lots of people don't want to wrangle those primitives, they just want to use them.

New comment by evanphx in "InitWare, a portable systemd fork running on BSDs and Linux"

evanphx — Thu, 03 Apr 2025 16:46:40 +0000

Agree and so I went looking and here is the reason: https://github.com/InitWare/InitWare/commit/3ee721035525dbb1....

They started with a specific version of systemd and have been mutating it since then, so the whole this is "tainted" with LGPL now.

New comment by evanphx in "Daylight Computer – New 60fps e-paper tablet"

evanphx — Thu, 23 May 2024 21:58:17 +0000

Upon hearing this (and seeing the software that you've got listed on the website) I went and bought one. Looks great!

New comment by evanphx in "A History of the Rubinius Ruby JIT"

evanphx — Thu, 11 Nov 2021 22:30:06 +0000

Hi, Evan Phoenix, Rubinius creator here. I just wanted to stop in and say thank you for this comment. It means a lot to me, even after all these years that Rubinius helped you out.

I mentioned this on twitter as well (https://twitter.com/evanphx/status/1458912013011152898?s=21) but wanted to reach out here and let you know personally too.

Thank you.

Tokio: A Finagle inspired network application framework for Rust

evanphx — Wed, 03 Aug 2016 17:25:51 +0000

Article URL: https://medium.com/@carllerche/announcing-tokio-df6bb4ddb34#.fzhhchesg

Comments URL: https://news.ycombinator.com/item?id=12219727

Points: 7

# Comments: 0

Structured Logging – Part 1: What's the Big Deal

evanphx — Fri, 04 Sep 2015 17:19:41 +0000

Article URL: http://blog.current.sh/structured-logging-part-1-whats-the-big-deal/

Comments URL: https://news.ycombinator.com/item?id=10171729

Points: 2

# Comments: 0

Show HN: Auto-update Kubernetes service records in DNSimple

evanphx — Mon, 31 Aug 2015 22:58:28 +0000

Article URL: https://github.com/vektra/kube2dnsimple

Comments URL: https://news.ycombinator.com/item?id=10149629

Points: 2

# Comments: 0

Help us build the log management SaaS you want to use: current.sh

evanphx — Mon, 24 Aug 2015 16:29:55 +0000

Article URL: http://current.sh

Comments URL: https://news.ycombinator.com/item?id=10110996

Points: 11

# Comments: 0

New comment by evanphx in "Templar: A proxy to improve HTTP API interactions"

evanphx — Thu, 05 Mar 2015 17:24:06 +0000

It's very true that things like timeouts are done better within the client library. But Templar can combine timeouts with caching, allowing an API to appear to still be active and returning something even when it's just very slow.

Because a cache is best when it's populated often, it make sense to put that into a service that many different processes on different machines can use.

Everything within templar can be done by adding capabilities to client libraries, no argument. But most client libraries don't provide these capabilities in one programming language, let alone many of them. By having the functional available as a service, Templar provides these capabilities fairly transparently (and even more transparently in the future when there is per/host and per/url configuration).

New comment by evanphx in "Templar: A proxy to improve HTTP API interactions"

evanphx — Thu, 05 Mar 2015 17:20:16 +0000

That assumes nginx has the capability to do what Templar does and I don't believe that's true.

New comment by evanphx in "Templar: A proxy to improve HTTP API interactions"

evanphx — Thu, 05 Mar 2015 17:18:46 +0000

Templar does not do SSL termination because it does not terminate requests for your api. It's designed to mediate connections between you and any APIs that you use, protecting you against those APIs being unreliable.

New comment by evanphx in "Templar: A proxy to improve HTTP API interactions"

evanphx — Thu, 05 Mar 2015 17:17:41 +0000

Yup! That's on the todo list. Auto-caching, as I'm calling it, would figure out a how long to cache something for and then be able to later on use HEAD to check if the url in question has changed.

That cache time could be as long as 5 seconds, so that Templar is checking pretty often if the upstream has changed.

New comment by evanphx in "Templar: A proxy to improve HTTP API interactions"

evanphx — Thu, 05 Mar 2015 17:15:26 +0000

Thanks Veejay!

New comment by evanphx in "Templar: A proxy to improve HTTP API interactions"

evanphx — Thu, 05 Mar 2015 17:14:59 +0000

Templar is designed to be used within your own infrastructure on a trusted network, where you talk to it and it talks to the outside world.

An attacker would have to be already within your private network, and if they were, they could observe the traffic in plain text already.

I think the confusion is around where Templar sits in relation to your app making HTTP API calls and the services you want to talk to. I'm going to draw up a diagram to help explain this better.

New comment by evanphx in "Templar: A proxy to improve HTTP API interactions"

evanphx — Thu, 05 Mar 2015 08:09:20 +0000

Ah! Ok, I got it. Feels like the right way to handle this is the allow a blacklist to be defined via config file, then applied as request, something like "X-Templar-Blacklist: internal". The list would be a set of ip ranges and thus you'd have to construct the list so that the EC2 => EC2 problem doesn't crop up, but it's doable!

New comment by evanphx in "Templar: A proxy to improve HTTP API interactions"

evanphx — Thu, 05 Mar 2015 07:06:34 +0000

Looking at that CPAN module, it wouldn't be hard at all to add a blacklist to Templar via a config file that is checked. The EC2 => EC2 issue is probably the biggest stumbling block to getting what you want. I'll have to investigate that, it seems like that would only happen if internal to EC2 they do ICMP redirects...

New comment by evanphx in "Templar: A proxy to improve HTTP API interactions"

evanphx — Thu, 05 Mar 2015 07:02:30 +0000

That's good point actually, I could see that happening.

What is your concern about the url used? That they point at something a user is trying to coerce you to hit? If so, that could be a public IP too..

New comment by evanphx in "Templar: A proxy to improve HTTP API interactions"

evanphx — Thu, 05 Mar 2015 04:29:32 +0000

A great question. Nginx is not typically configured as a normal proxy but it can certainly do it. A difference is that Templar gives you control of options applied to each request differently rather than the same the same to all.

From timeouts to caching, one Templar can be used for all different kinds of upstream APIs.