Hacker News: thresh

New comment by thresh in "Dav2d"

thresh — Sat, 02 May 2026 20:55:40 +0000

Of course, static websites is the best solution to that problem.

Our documentation and a main website are not fronted by this protection, so they're still accessible for the scrapers.

New comment by thresh in "Dav2d"

thresh — Sat, 02 May 2026 20:51:26 +0000

You cant really cache the dynamic content produced by the forges like Gitlab and, say, web forums like phpbb. So it means every request gets through the slow path. Media/JS is of course cached on the edge, so it's not an issue.

Even when the amount of AI requests isnt that high - generally it's in hundreds per second tops for our services combined - that's still a load that causes issues for legitimate users/developers. We've seen it grow from somewhat reasonable to pretty much being 99% of responses we serve.

Can it be solved by throwing more hardware at the problem? Sure. But it's not sustainable, and the reasonable approach in our case is to filter off the parasitic traffic.

New comment by thresh in "Dav2d"

thresh — Sat, 02 May 2026 20:19:52 +0000

I'm all ears on how we can fix it otherwise.

Keep in mind that those kinds of services: - should not be MITMed by CDNs - are generally ran by volunteers with zero budget, money and time-wise

New comment by thresh in "Dav2d"

thresh — Sat, 02 May 2026 18:57:58 +0000

We had to set it up on the parts of VideoLAN infra so the service would remain usable.

Otherwise it was under a constant DDoS by the AI bots.

New comment by thresh in "Native ACME support comes to Nginx"

thresh — Thu, 11 Sep 2025 19:31:53 +0000

Just use the official packages from https://nginx.org/en/linux_packages.html#Ubuntu

nginx-module-acme is available there, too, so you don't need to compile it manually.

New comment by thresh in "Nginx introduces native support for ACME protocol"

thresh — Wed, 13 Aug 2025 20:32:03 +0000

I'm currently working on getting the Trixie packages uploaded. It'll be there this week.

As you've said Debian 13 was released 4 days ago - it takes some time to spin up the infrastructure for a new OS (and we've been busy with other tasks, like getting nginx-acme and 1.29.1 out).

(I work for F5)

New comment by thresh in "Why does the U.S. always run a trade deficit?"

thresh — Wed, 21 May 2025 00:56:32 +0000

Is that correct? My understanding is that the SWIFT transfer will go through a US correspondent bank in this case.

New comment by thresh in "The extraordinary lives of coast redwoods"

thresh — Fri, 08 Mar 2024 22:05:38 +0000

Uh, Siberia and Russian European North.

New comment by thresh in "Nginx Security Advisory"

thresh — Thu, 15 Feb 2024 00:08:56 +0000

Hi!

The official nginx docker images ship with HTTP3 module enabled - and we have released the updated ones earlier today - so please update to stay secure.

You can also launch something like: $ docker run -ti --rm nginx:latest nginx -V

to check which modules are compiled in to the binary you're running.

Thanks!

New comment by thresh in "Chrome Removing Theora Support"

thresh — Tue, 24 Oct 2023 03:19:41 +0000

VLC has a port to WebAssembly: https://code.videolan.org/jbk/vlc.js#vlcjs-vlc-for-wasmasmjs

(it's actually usable to some extent)

New comment by thresh in "HTTP/2 zero-day vulnerability results in record-breaking DDoS attacks"

thresh — Tue, 10 Oct 2023 16:26:11 +0000

nginx: https://mailman.nginx.org/pipermail/nginx-devel/2023-October...

New comment by thresh in "HTTP/2 Rapid Reset: deconstructing the record-breaking attack"

thresh — Tue, 10 Oct 2023 16:25:24 +0000

Read this: https://mailman.nginx.org/pipermail/nginx-devel/2023-October...

New comment by thresh in "The future of AlmaLinux"

thresh — Thu, 13 Jul 2023 23:58:14 +0000

> We will also start asking anyone who reports bugs in AlmaLinux OS to attempt to test and replicate the problem in CentOS Stream as well

So what's the point of running Alma then?

New comment by thresh in "Bitcoin miners in Abkhazia are causing blackouts in remote villages [video]"

thresh — Fri, 12 Mar 2021 13:03:10 +0000

The electricity there isnt just cheap, it's virtually free. They just dont shut you off it you don't pay.

New comment by thresh in "A Technology Preview of Nginx Support for QUIC and HTTP/3"

thresh — Sat, 20 Jun 2020 13:56:34 +0000

Is HTTP2 in the paid version different than the opensource implementation?

New comment by thresh in "Climate Change Is Killing Alpine Skiing as We Know It"

thresh — Thu, 16 Jan 2020 12:31:05 +0000

Even the bloomberg article states:

> Already, the summer generates 60% of the tourism intake, according to Garmisch Mayor Sigrid Meierhofer.

Indeed, hiking doesnt require you to spend moneys on rental equipment. It's a bit different for mountain biking - most of the time you need lift passes to enjoy the mountain. And with the explosion of electric bikes rentals in the last years, and there are lots of growth opportunities for generating revenue there as well.

And it's not only about hiking/biking, of course.

Of course, having more places to ski is better than having less places - my main concern is people and their jobs, and not specific resort activities per se.

New comment by thresh in "Climate Change Is Killing Alpine Skiing as We Know It"

thresh — Thu, 16 Jan 2020 12:20:49 +0000

I don't think there's much culture lost in moving a few ski lifts to a higher altitude place.

New comment by thresh in "Climate Change Is Killing Alpine Skiing as We Know It"

thresh — Thu, 16 Jan 2020 12:06:35 +0000

So they'll just convert the lower altitude resorts to more "summer" activities like hiking and mountain biking.

New comment by thresh in "Mirantis acquires Docker Enterprise and Docker raises $35M"

thresh — Wed, 13 Nov 2019 18:04:51 +0000

Finally they found someone to get sold to. Only 750 customers, so low.

And no info on the price.

New comment by thresh in "Docker Hub Registry is down"

thresh — Tue, 15 Oct 2019 18:04:15 +0000

No, you should rewrite your CI not to depend on external stuff, if you want sane evenings.